smokeloader | 92511dd7ed0799023ad8a896e8add7ed591a573d4d2d51e2d6d1788ee98c1869 | Triage

Sharing

General

Target

92511dd7ed0799023ad8a896e8add7ed591a573d4d2d51e2d6d1788ee98c1869
Size

140KB
Sample

241110-dwadys1phm
MD5

3f351e8cc3561b5cd0ed1c25daef7eeb
SHA1

1995184c3a23a5d722c0ae4516fa9cd81702e2ab
SHA256

92511dd7ed0799023ad8a896e8add7ed591a573d4d2d51e2d6d1788ee98c1869
SHA512

01eeff2f624644591ccbe083c655a3a95b1ec8efd0a26febe660dcaf7dacc281d23056b2d05b846baec26561d9ef7d68267b34434139650cb000046b5de989b6
SSDEEP

3072:prLnil86T2uA7qe0Jag/MEIZIRPjVHi1yQ8J/MQukCNTmU0:lL+S7qeSaEMkRUKaNTE

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  b8425c146c80842725d1a027e6fca7e3385c4dabd550a72d60683e4e529ca02f
- Size
  
  226KB
- MD5
  
  5df72ca427104352637a5ef056030e3b
- SHA1
  
  626e79a6af439050ef99af38bc275d2116ee4e7a
- SHA256
  
  b8425c146c80842725d1a027e6fca7e3385c4dabd550a72d60683e4e529ca02f
- SHA512
  
  e4f535ba567d03c493a0d94a7d77be74d4dad4cf3315ebacfcf67f19c163fabfa6dfb4352a318f8aa994c116cf1be12b1d2c40a89531969522763971ea52220e
- SSDEEP
  
  3072:UDFmLorhb5NVSvhE7cEyVQgZElt93CauDHFXf/ln:jLoNRSvhEIEyVQXfSaMf
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan