smokeloader | 186a92f25dbe48f0c288400de870b660f17889d2ec9eee67ddbee4c2f3e40364 | Triage

Sharing

General

Target

359d945b4afc9953e797b7861dbebe9e6bf10b40
Size

153KB
Sample

241110-cchqjsxamn
MD5

697b2105b4052380ea3ca695acc42c79
SHA1

359d945b4afc9953e797b7861dbebe9e6bf10b40
SHA256

186a92f25dbe48f0c288400de870b660f17889d2ec9eee67ddbee4c2f3e40364
SHA512

28b199679e4022ec5d90923d4b129b9c47ed3deab382c23252b23c353abe50df5092d925af496eac264106e8bc051d24a510f2d1be6a8a1b0f832c285fe62f03
SSDEEP

3072:0GxzTjTc5S5utC0mK45muLR91BHr0v5B:hW40mKArz

Score

10^/10

smokeloader mnew backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

Mnew

Targets

- Target
  
  359d945b4afc9953e797b7861dbebe9e6bf10b40
- Size
  
  153KB
- MD5
  
  697b2105b4052380ea3ca695acc42c79
- SHA1
  
  359d945b4afc9953e797b7861dbebe9e6bf10b40
- SHA256
  
  186a92f25dbe48f0c288400de870b660f17889d2ec9eee67ddbee4c2f3e40364
- SHA512
  
  28b199679e4022ec5d90923d4b129b9c47ed3deab382c23252b23c353abe50df5092d925af496eac264106e8bc051d24a510f2d1be6a8a1b0f832c285fe62f03
- SSDEEP
  
  3072:0GxzTjTc5S5utC0mK45muLR91BHr0v5B:hW40mKArz
Score

10^/10

smokeloader mnew backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloadermnewbackdoortrojan

behavioral2

smokeloadermnewbackdoordiscoverytrojan