smokeloader | ec0c436444d77e6657310c5335f35132864b1c5b9287172c88b1be5f4833412b | Triage

Sharing

General

Target

d29529a31373bd7158328fe75df3808eeae1a8e8
Size

137KB
Sample

241110-yexs5swreq
MD5

f657ce20b49b97852351cefd0be5e71d
SHA1

d29529a31373bd7158328fe75df3808eeae1a8e8
SHA256

ec0c436444d77e6657310c5335f35132864b1c5b9287172c88b1be5f4833412b
SHA512

240db4dcb8ed2d8c8ff5008c0d11b5370952a8cbfa7e45ea393d470460f9925f3151301aa603a13b9a0c1b7ae40b755343bf9b16c356ac66d2300e990c5fe8b8
SSDEEP

3072:hX58nci6UkxoG4LO/7yhfT10OB47PlKivnOreHhO2mUDpj:gndRS76fRnB4DoivOreHx

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  1338d926ad898d16855ca398db240621f0fe2eaabe16f93ac86ced80295ec0a1
- Size
  
  191KB
- MD5
  
  74c6e803732d90d37524f3c4fb0642f8
- SHA1
  
  04f5f4a7621ec6b389b98676c1effab044fe608e
- SHA256
  
  1338d926ad898d16855ca398db240621f0fe2eaabe16f93ac86ced80295ec0a1
- SHA512
  
  57263f0ddfce4cf7fcd96993b06be4940523dad3e0e5a7fb2981b32a720967cc569ac5be059b6e9d4cb2d1e6f715767f011e50af557a49b3bb626e072770fd0e
- SSDEEP
  
  3072:i3hsp9+mctw6VODsFkoKLbHLvRXHAm2bEjUaPjuvifWksxkgaBChG:Ws7+ntKDxHLvRXf6EMifeiga
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan