smokeloader | 148187957cb24c3b21f90cf21c43e3bdde017b524fff00693fa2149cb3f3a062 | Triage

Sharing

General

Target

148187957cb24c3b21f90cf21c43e3bdde017b524fff00693fa2149cb3f3a062
Size

276KB
Sample

241109-wqyhpszanf
MD5

587f8347d9e211b272af8e4fd4c4e751
SHA1

8a3790f92a978a7249e78bc35998da32805e5df5
SHA256

148187957cb24c3b21f90cf21c43e3bdde017b524fff00693fa2149cb3f3a062
SHA512

26727f828c1e076951237762c79fe46e4196cac1962db986efe12457de99a4a94e01e1b97eeae564acfd85d4df945a036fe13796788336825328e9d2be09bd55
SSDEEP

6144:K6ZLpaXf224h3jBWEZlBeGlqQw/d5B0Z9w+L:vZ+f224h3jBxZW2pw/7B07

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  148187957cb24c3b21f90cf21c43e3bdde017b524fff00693fa2149cb3f3a062
- Size
  
  276KB
- MD5
  
  587f8347d9e211b272af8e4fd4c4e751
- SHA1
  
  8a3790f92a978a7249e78bc35998da32805e5df5
- SHA256
  
  148187957cb24c3b21f90cf21c43e3bdde017b524fff00693fa2149cb3f3a062
- SHA512
  
  26727f828c1e076951237762c79fe46e4196cac1962db986efe12457de99a4a94e01e1b97eeae564acfd85d4df945a036fe13796788336825328e9d2be09bd55
- SSDEEP
  
  6144:K6ZLpaXf224h3jBWEZlBeGlqQw/d5B0Z9w+L:vZ+f224h3jBxZW2pw/7B07
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan