smokeloader | 49ecec76f6c4db73ddb9a9588223df183b686c03184857de95723c394dff0926 | Triage

Sharing

General

Target

49ecec76f6c4db73ddb9a9588223df183b686c03184857de95723c394dff0926
Size

234KB
Sample

241110-nmgrsawdrh
MD5

66cbb211d421794fd3b07d1bbb2280f2
SHA1

c5698c05fc93a44bedba9cc7b27cfcb63e6fcd9b
SHA256

49ecec76f6c4db73ddb9a9588223df183b686c03184857de95723c394dff0926
SHA512

bf25138439b745d9e315acb56448e759ebbf025813fe7ae4b19741aabf9a6ff0fa68d3932d3675272953c1b2216ec4ef070af665a51fc488f3f93ac1215337cf
SSDEEP

1536:Zad0UCQdOmdNXvEDnG/mneoBtkcDOVI+F00Th0sEKU4R79pO31i3TMMYUgldzwav:sdeQVeGgR8Jf0tK7R79AY3wMYFdcaf+

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  49ecec76f6c4db73ddb9a9588223df183b686c03184857de95723c394dff0926
- Size
  
  234KB
- MD5
  
  66cbb211d421794fd3b07d1bbb2280f2
- SHA1
  
  c5698c05fc93a44bedba9cc7b27cfcb63e6fcd9b
- SHA256
  
  49ecec76f6c4db73ddb9a9588223df183b686c03184857de95723c394dff0926
- SHA512
  
  bf25138439b745d9e315acb56448e759ebbf025813fe7ae4b19741aabf9a6ff0fa68d3932d3675272953c1b2216ec4ef070af665a51fc488f3f93ac1215337cf
- SSDEEP
  
  1536:Zad0UCQdOmdNXvEDnG/mneoBtkcDOVI+F00Th0sEKU4R79pO31i3TMMYUgldzwav:sdeQVeGgR8Jf0tK7R79AY3wMYFdcaf+
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan