smokeloader | ef7b323da7f0a641372fd2248c561c879aa1dfeafa294df4564e5dee6d3b72aa | Triage

Sharing

General

Target

e1911a77cf7dcaf982420e17f82cf0b3
Size

163KB
Sample

241109-sn2wkazkhq
MD5

e1911a77cf7dcaf982420e17f82cf0b3
SHA1

3967cfbef1cfb6c030c00530a4c37a9e188e38e1
SHA256

ef7b323da7f0a641372fd2248c561c879aa1dfeafa294df4564e5dee6d3b72aa
SHA512

fe484c29c7ba02bcbd00a0834192bbe81bc3f1d8c94fb86776e2fd0bbfbc954e3b22b8b0a7841ff9babf7f7118e8c1491a962ad7c04e928fc7233db410d759fc
SSDEEP

3072:+lxsjeGLZ9T+IR+qHEO+lUoG75xtJ/jBfM6oFsmeS4Ucs+:2u1LZ9TRknGF/jBfM6GPem

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  e1911a77cf7dcaf982420e17f82cf0b3
- Size
  
  163KB
- MD5
  
  e1911a77cf7dcaf982420e17f82cf0b3
- SHA1
  
  3967cfbef1cfb6c030c00530a4c37a9e188e38e1
- SHA256
  
  ef7b323da7f0a641372fd2248c561c879aa1dfeafa294df4564e5dee6d3b72aa
- SHA512
  
  fe484c29c7ba02bcbd00a0834192bbe81bc3f1d8c94fb86776e2fd0bbfbc954e3b22b8b0a7841ff9babf7f7118e8c1491a962ad7c04e928fc7233db410d759fc
- SSDEEP
  
  3072:+lxsjeGLZ9T+IR+qHEO+lUoG75xtJ/jBfM6oFsmeS4Ucs+:2u1LZ9TRknGF/jBfM6GPem
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan