smokeloader | 5b795c7c9d3a2e08619aa3ac309b83d6fa770b3b76fb5e6e7c4c9d8adf645888 | Triage

Sharing

General

Target

a77616bcdbb219e2924e0af7eb98e87c
Size

142KB
Sample

241109-sexkgszjdp
MD5

a77616bcdbb219e2924e0af7eb98e87c
SHA1

4816ea6f8f2a8be60c685f1e2d9087965d3c97f8
SHA256

5b795c7c9d3a2e08619aa3ac309b83d6fa770b3b76fb5e6e7c4c9d8adf645888
SHA512

b31bf1f94f2dcc1b1a6b96dfb7c5892bd111ea9943cecad4fa9c17230c9aa93d560c05c601c6b059af2253ed7bb10510c7fecb0c1d1166a18a30d2d1ab414ed9
SSDEEP

3072:KuO4Z57W4vCOXYvAEcLkOgJQstokyoVUqSiiDs:KuOiWG+AzLkORsLwqDis

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  d1d3ed6835bddd4d5b83f9e8efc2f7cbf266c24dfb90dffc2f904c252f3cd896
- Size
  
  216KB
- MD5
  
  aa7a2ef84d2ded0d8db330bce729a330
- SHA1
  
  ab3e13bebbbd5a90fe68823824081b28be7103e1
- SHA256
  
  d1d3ed6835bddd4d5b83f9e8efc2f7cbf266c24dfb90dffc2f904c252f3cd896
- SHA512
  
  ad666aebccbe48e120b2b6bf39167fe0a5e693f2f9e10515de2d81c5a19df3204ec90ffd3ba1e63fea9be0733319975579d63d60e516ad8dee8121cc70fa408f
- SSDEEP
  
  3072:yLZpt44D314nL/GAlK6gjSX5AjHNCnatIw2zNsOxriclSDsLVKx:yLV5DlYL/GAlKXjSUPI/JJhltL4
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan