smokeloader | 921372cdacfa3afbe7dacf3a1b3c0e12656d1132f59bff278fdd2e3f1450c436 | Triage

Sharing

General

Target

c99a9c645965f321c24da0bd2221bd01
Size

147KB
Sample

241110-n5bngswgqc
MD5

c99a9c645965f321c24da0bd2221bd01
SHA1

2a2c28daf28ab57077173b78f1ed3e020cd7a22c
SHA256

921372cdacfa3afbe7dacf3a1b3c0e12656d1132f59bff278fdd2e3f1450c436
SHA512

016b91be76d5f5db3eb1264a023af2277e0abb2b444d1a9af9166b2a2986b5ca128a74a6b27ef7e2bed85f7b989fc148d08182e11ca4b253f1e8c94a72259503
SSDEEP

3072:FIX55ZrXCkQXnqUgwlUtHlEh1Xc+o+PY9dQ0Dhft4TFrWsksQ5V:FIxUXnqUgwl+w1XHo+62U4TosksY

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  f17d84c536402759c058c820de1ab2896ca6ff046bd42cbb7cb93ee1dec262f8
- Size
  
  226KB
- MD5
  
  0fc85229bfeb9ad05e098e8d0ec33f77
- SHA1
  
  ceac79804d971625f9d39b5d1853bffbce21ceaf
- SHA256
  
  f17d84c536402759c058c820de1ab2896ca6ff046bd42cbb7cb93ee1dec262f8
- SHA512
  
  882a9e5f42550c0a6da3e8aebe05a223c3065939a8f4229443395c367dd28abb117a216f979c0a24ebd9ae74c3e4f748ebca120a7beccf2db6bc2f8d6a7b378b
- SSDEEP
  
  3072:B4kIbtVZEC4v1s5LIuhuIJE/GqHp8f/OLFhJAlDQ377FvL1Ho6XlK1HO:B7IBnMWLIMuIJE/Gj0ylDmLdoogH
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan