smokeloader | 1ce3f07ac872167d42f329d624182d395020bec54a3d81306f6865d5d35d2729 | Triage

Sharing

General

Target

e9d5d1b642177ef5029b30d01b613f622c45024f
Size

142KB
Sample

241109-w9e6gazdjd
MD5

3e85958b31c8c7169b58b39287a79e1e
SHA1

e9d5d1b642177ef5029b30d01b613f622c45024f
SHA256

1ce3f07ac872167d42f329d624182d395020bec54a3d81306f6865d5d35d2729
SHA512

93c3d9a8a2da1c3ac402022a748913f395f4d27d2c008402a6f3f64a314d3b704356c4d478a8523e0c753b002935ae92e969a81f4d29e4f16f915f4611e05bb0
SSDEEP

3072:vpagGgu0Bif2sogskwnhSHGkVRcfWcl79IFjNCSiCGgyi1gdV4qGX7lDxc5w:B1GSifbskuSHGOmJl79IFaCGi1o4quDx

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  b2e3670b7a2ab39f8e1041e16f9625577eaca98c78885475e7980bf035b493de
- Size
  
  213KB
- MD5
  
  3299d71662eeafeb7edd52684d2cd389
- SHA1
  
  2087919eb78e7523f6aacbed32dd3a3b2bd72e73
- SHA256
  
  b2e3670b7a2ab39f8e1041e16f9625577eaca98c78885475e7980bf035b493de
- SHA512
  
  3e527ce723d8e1248d835a3eb88d6c6bf2c887cb54eac2de9a0536450b289e3d405b05330854f7207f7eeb345a09d5cebda972ff2538ed5e7dcc5e2f5b81a8f6
- SSDEEP
  
  3072:EYZXfzpgxXQUkQZ4m2KbSvUFb4xb/PnnV9XTTwsxkgaBCh:EMr2xgT7Kbcabsb/PnnVTiga
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan