smokeloader | c6c86550595ab83593da1e321a8b5a7eb8bc2c8e6b80379cd2a85bb778604aef | Triage

Sharing

General

Target

c6c86550595ab83593da1e321a8b5a7eb8bc2c8e6b80379cd2a85bb778604aef
Size

334KB
Sample

241109-ne8wassncx
MD5

45112a80b88b8b618d0d25f9b2509bd3
SHA1

94f24e533e53fd24570f860fb3099a65df03825e
SHA256

c6c86550595ab83593da1e321a8b5a7eb8bc2c8e6b80379cd2a85bb778604aef
SHA512

bdaceb42dd3f6655ce5bb4cf68f8adc0082585377776d5d099bff1061b96deca024bc1923caf40b78a358063a61b582038c9d04fb1a35464c1faf3d3f183d30c
SSDEEP

6144:IHhmBxYeLEifDSdbSiU1x7mhT8AQvq7PK67tWiRm0sBcI2CiNu/n:IMBWg2dbSHQJ12q7C67LESI9Go

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  c6c86550595ab83593da1e321a8b5a7eb8bc2c8e6b80379cd2a85bb778604aef
- Size
  
  334KB
- MD5
  
  45112a80b88b8b618d0d25f9b2509bd3
- SHA1
  
  94f24e533e53fd24570f860fb3099a65df03825e
- SHA256
  
  c6c86550595ab83593da1e321a8b5a7eb8bc2c8e6b80379cd2a85bb778604aef
- SHA512
  
  bdaceb42dd3f6655ce5bb4cf68f8adc0082585377776d5d099bff1061b96deca024bc1923caf40b78a358063a61b582038c9d04fb1a35464c1faf3d3f183d30c
- SSDEEP
  
  6144:IHhmBxYeLEifDSdbSiU1x7mhT8AQvq7PK67tWiRm0sBcI2CiNu/n:IMBWg2dbSHQJ12q7C67LESI9Go
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan