smokeloader | 8e72202a7709b5533d35d68d1f5a9a27ae12db82d36686be0a3e94206c46d037 | Triage

Sharing

General

Target

3639707bdf66d4be3100ba3da9e61229
Size

210KB
Sample

241110-le1htatfrl
MD5

3639707bdf66d4be3100ba3da9e61229
SHA1

0faa887d0416755e0cb483e31fa3900c6c9b06b1
SHA256

8e72202a7709b5533d35d68d1f5a9a27ae12db82d36686be0a3e94206c46d037
SHA512

8dc30843fdf8d2a95bb7fa47cf8b9e457f32f16b0b967473730ea0ab07174a92f79d3254d1bc8ba8c7b7d05c9723a1387e533645ef6d3a33da6ab98e979763ba
SSDEEP

3072:++tSNrbmfD+wXbqm/zZUNfvCl4u8cvlHK2ddTNxv2JWfgPCaQ8TesP2Vz2ltMGuG:+P0D7bp/taevZK2ddbezCaQ4yVz2lluG

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  e1268816362105a21eb617c4a558ec7bd07b95a879eb7b5b53091e333496d3cc
- Size
  
  315KB
- MD5
  
  1e0cb852ceabe48fe07138d0edf648f5
- SHA1
  
  6fd568ffaf818dd8f00f911c085be669c1897db2
- SHA256
  
  e1268816362105a21eb617c4a558ec7bd07b95a879eb7b5b53091e333496d3cc
- SHA512
  
  cf11a4f827d056783de20f52ae9fcecf4d8ba494809e95217c40e4e877bf7ecb4b0311723c55b14af52fede494ddc827ad31004ef056237a04359cdb6fd7bb7a
- SSDEEP
  
  6144:oBGe8L94QgnAC0T8C1zWJsRgCEn2E1aJ:ocvx4QCACSzWOpUv
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan