smokeloader | bd2aa867c518317f44672fde38ad46f05a12ccc8a90e9db3cd71a3589044b93d | Triage

Sharing

General

Target

1ebb73bc0229e738f770ab5cf7cbb96ba0bb0069
Size

222KB
Sample

241109-ygys8a1cka
MD5

19ef8e6702959d3d326bdf7e2ffce2eb
SHA1

1ebb73bc0229e738f770ab5cf7cbb96ba0bb0069
SHA256

bd2aa867c518317f44672fde38ad46f05a12ccc8a90e9db3cd71a3589044b93d
SHA512

2db4e14c3b066e85e5d735548a42509d2979ad119464f6256a8b5846dc7d1e1bd01a0596917d65df971a24ac773f1aca86d496a96d69d6a13f6ee393db18a983
SSDEEP

3072:xKnNR99Rq8Sv3UBLt7uwXB6Mx5c/w7zLRWEGewslPhsfmFN89e2K:xKX9/OEBLt1XBxUw7z1WERwe+mFN8It

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  1ebb73bc0229e738f770ab5cf7cbb96ba0bb0069
- Size
  
  222KB
- MD5
  
  19ef8e6702959d3d326bdf7e2ffce2eb
- SHA1
  
  1ebb73bc0229e738f770ab5cf7cbb96ba0bb0069
- SHA256
  
  bd2aa867c518317f44672fde38ad46f05a12ccc8a90e9db3cd71a3589044b93d
- SHA512
  
  2db4e14c3b066e85e5d735548a42509d2979ad119464f6256a8b5846dc7d1e1bd01a0596917d65df971a24ac773f1aca86d496a96d69d6a13f6ee393db18a983
- SSDEEP
  
  3072:xKnNR99Rq8Sv3UBLt7uwXB6Mx5c/w7zLRWEGewslPhsfmFN89e2K:xKX9/OEBLt1XBxUw7z1WERwe+mFN8It
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan