smokeloader | 50e4b91844875dc7c9644a7b3f3a412e4cef4f7675c5dea8016b160d1766cd32 | Triage

Sharing

General

Target

50e4b91844875dc7c9644a7b3f3a412e4cef4f7675c5dea8016b160d1766cd32
Size

140KB
Sample

241110-3qlmgaxhjh
MD5

a54e2410ede6d7e2b5c09d71f82bce2a
SHA1

284fcca666ea40c49d6037b09c8cb5675c63e356
SHA256

50e4b91844875dc7c9644a7b3f3a412e4cef4f7675c5dea8016b160d1766cd32
SHA512

8b89b6f9b88da6dc76184ff2d811d42d04d6935dc2f5e84f7d0f514fe26766559481f94e1afb3ce683813175fb2d3e20f0252cae32a85bd4ed3ab56ddc973d73
SSDEEP

3072:1qqWFjUxm1Csu7M+RAXlkpJnA4lf5W3X4KkwkVAfFsdyc6PLwHSS:13WNH8MaAVkpJnA4lf5W3X9XkG2wiSS

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2cd68fb90b9674875829727e74ff9ace0b39b7fca214532da2028e9b1c1f10ae.exe
- Size
  
  215KB
- MD5
  
  b3f4fcfb20dc2d65bc7355f744cc471a
- SHA1
  
  9768b327aa6be677923550e9d949b0606eb3f116
- SHA256
  
  2cd68fb90b9674875829727e74ff9ace0b39b7fca214532da2028e9b1c1f10ae
- SHA512
  
  c06154e6d6b481f2fd81e259bba4afa9522e276a09ce075a6610fda3e0b70e7349c951564c801a9293865457fabb1c7ccfb3d8755e5f666bf837eb4d091f85fb
- SSDEEP
  
  3072:YOheLohi1b504c421BzTmTg/S4ZtdSw8bgtn7Ze3Azb:loLAi1lABOTiSw8ZAzb
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan