smokeloader | df95676f389e3660dceed2b08ff9080c421cdfdcef9a5753aca5152cd6677ec9 | Triage

Sharing

General

Target

df95676f389e3660dceed2b08ff9080c421cdfdcef9a5753aca5152cd6677ec9
Size

216KB
Sample

241109-xdtveszdqa
MD5

781b077b920242995cac44e2bf62e887
SHA1

6eea11a073f059e7fff2241a612252b67a3b06e3
SHA256

df95676f389e3660dceed2b08ff9080c421cdfdcef9a5753aca5152cd6677ec9
SHA512

3d37f1f3059424692b7f4f859f542e90deef2f608c8ab6c9a26d67237f52b633229642e96647fee5c43baec30d4c42b665648672ff1643511ddba051ca153963
SSDEEP

6144:+3h8baSYLi3Ny1jg0qkqNVIpBt1y9siZrAUC65:PYLi3upBMruK

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  e6e31997eb7c4d11417eacc33fc9d1c3fe58345729c8a120ca29348ce45bd73e
- Size
  
  330KB
- MD5
  
  3c10dc9df5b42968e8bbe67387bc30a2
- SHA1
  
  eae93159c2eada20557e7bcef365cbfc6e25b471
- SHA256
  
  e6e31997eb7c4d11417eacc33fc9d1c3fe58345729c8a120ca29348ce45bd73e
- SHA512
  
  b0d345f5c4fdbfcd21898f7c7dcb4a7dbe98073b9e0f42469743052daad32a90450835eed508d8f64ce0fdc3179d9519e0e62f5349a06555c366971ced62ab70
- SSDEEP
  
  6144:ozNeBb2LSMHey7/bQAtoFmU46DGhIX3B00ZrrMC7Ce:oB1OMHeEjQqU46TxbRQEC
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan