smokeloader | 886b5dcfec3be3225c5622c83f9583764c8c7373af4ad4694c83fe737915e9d1 | Triage

Sharing

General

Target

886b5dcfec3be3225c5622c83f9583764c8c7373af4ad4694c83fe737915e9d1
Size

137KB
Sample

241109-w33yyszcnq
MD5

b5418fdd4654823372f5c38e4dc6a96d
SHA1

586c99e33bb8b0e34df78041b93b4ab9601ca53c
SHA256

886b5dcfec3be3225c5622c83f9583764c8c7373af4ad4694c83fe737915e9d1
SHA512

1636408c3ab6c8063be3902e915c83faf6c2fc229d4bb3d7d7c328739ec62ef7e6aae586e1e08b21505320b13ee63ecdcf139e9da97445a945e42cb2842a9dda
SSDEEP

3072:EOH+MinmS3vOMeGamCBtTD89FyG1MQAANDR3DYFk/Z5:r+B3vOlxg9F/1MQAANDhYFq

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  90188daa3aa2eab9f309dd2edb5bb30bea5ca9a9f69e642cbdb9401494c900b3.exe
- Size
  
  211KB
- MD5
  
  2362a2280f393737d0d30f5dd9813d37
- SHA1
  
  45fbba5af31f44d86b97f8f528b5a2516d9d1b54
- SHA256
  
  90188daa3aa2eab9f309dd2edb5bb30bea5ca9a9f69e642cbdb9401494c900b3
- SHA512
  
  7ff954b35dc8ba5d29994e8ae50621667dce0439b993e56662cd5dfc9dfc9b57d2296ac0e0633e08e2cbad7017dcbf1d8cb8f120d0a3c54182a76b370d297c58
- SSDEEP
  
  3072:QXcRf2veLu1GBp5uK8A7LOacmcnZeOrk/JX94/lXONZh5Xf4dRSP:EzeLfBC2LOxmcnn8JXoOl5P4
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan