smokeloader | 676ad3031d6ddd60cac34add76c0285ebf2de3dfa97b5cb4ca5d4d93efc81cc1 | Triage

Sharing

General

Target

676ad3031d6ddd60cac34add76c0285ebf2de3dfa97b5cb4ca5d4d93efc81cc1
Size

132KB
Sample

241109-m591lstbjj
MD5

f2f1b97c733698ad3c6ddb4a12bc703e
SHA1

51e3ca64e3b6b3f74a714df9d916303e5ffe22a3
SHA256

676ad3031d6ddd60cac34add76c0285ebf2de3dfa97b5cb4ca5d4d93efc81cc1
SHA512

428b1f0d5e6f7acba9583f7bfd13bb8ec365a21c85501f650b65f6a163ac4cdfb40ba2826233843bd0ff450d6c2d26bc4b146baa10f0892c7a145283a13be6af
SSDEEP

3072:sqcKTMOp0AZqAqfhYDuV08xrWPKOIpfasw15lIkmMx8:EmMdCaV08NWb2Ss7

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  ce69c1ce0021cbf3858ac6aa7438ff4a0a5facb527fe97d4ab9ed6957abd86d8
- Size
  
  193KB
- MD5
  
  92469931cb44beb2b06bb19fc1f2a327
- SHA1
  
  85e96b0294d384522f948f43ea6030800cb19c05
- SHA256
  
  ce69c1ce0021cbf3858ac6aa7438ff4a0a5facb527fe97d4ab9ed6957abd86d8
- SHA512
  
  cb0de5c983e4fa57fbe323da982b478a7e142b313899e9b108619ab1bdb03b5f9bcaa56dc53e8302ffb0bcbbd27c3c94ec34ab2ce170acac8bb12e215e26dfec
- SSDEEP
  
  3072:4XSF8gLIjTVb5/7AU1lPTkHSc0K3sZO0NBegXnn1:Mq8gLoh9AalPu0u2NBeA
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan