smokeloader | 849f9f7c3482fc7e5da7b9cf809dfb9c93310bedd26138082932945fb66479c1 | Triage

Sharing

General

Target

849f9f7c3482fc7e5da7b9cf809dfb9c93310bedd26138082932945fb66479c1
Size

217KB
Sample

241110-pkv23azldk
MD5

3534cc8899e06062d5776176b223f1ca
SHA1

18b15c35a74e244b516b9a4ecff8b0b890c5bd1e
SHA256

849f9f7c3482fc7e5da7b9cf809dfb9c93310bedd26138082932945fb66479c1
SHA512

5ad006ceab3d7af06cd18a1c66952850e22ce65910de648401edcb26ea0cc08ce72855dd33721ac1c07bf2009d53b7ee3b12ae9b5470bc3b5b1d987a0a4ae0a1
SSDEEP

1536:4N52bQKwd3oYg3beLzwvO7uSkFcS1s4npt53WKqV7F1yz8gzJerLS:4OMKuFPnHue4npt53q7F1yz8gA

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  849f9f7c3482fc7e5da7b9cf809dfb9c93310bedd26138082932945fb66479c1
- Size
  
  217KB
- MD5
  
  3534cc8899e06062d5776176b223f1ca
- SHA1
  
  18b15c35a74e244b516b9a4ecff8b0b890c5bd1e
- SHA256
  
  849f9f7c3482fc7e5da7b9cf809dfb9c93310bedd26138082932945fb66479c1
- SHA512
  
  5ad006ceab3d7af06cd18a1c66952850e22ce65910de648401edcb26ea0cc08ce72855dd33721ac1c07bf2009d53b7ee3b12ae9b5470bc3b5b1d987a0a4ae0a1
- SSDEEP
  
  1536:4N52bQKwd3oYg3beLzwvO7uSkFcS1s4npt53WKqV7F1yz8gzJerLS:4OMKuFPnHue4npt53q7F1yz8gA
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan