smokeloader | 77ba3a5058034fe2c3d7c63abe1a8e8e6bf7fecfcf8b4c482098547ed0a7a2b3 | Triage

Sharing

General

Target

77ba3a5058034fe2c3d7c63abe1a8e8e6bf7fecfcf8b4c482098547ed0a7a2b3
Size

223KB
Sample

241111-eqjk4s1rcz
MD5

5bcddde0d6920439f9a1b054452da241
SHA1

1e85a796ca36a8d71def9f7876902f47b8707e85
SHA256

77ba3a5058034fe2c3d7c63abe1a8e8e6bf7fecfcf8b4c482098547ed0a7a2b3
SHA512

1ec4a18cdf850848b31fdbc2a94cf377cd34dbaaf351118d467ee501eb36f1c68a38a9eb175dc6ac961d1f348d527b30df6f8cdd1421f08959c22198fb0a2c5f
SSDEEP

6144:PHRt6whgzmSUL0XxGwRTsDkqtngfFmLQdGN6H5:vxCqScwRTsDkqmFmMj5

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  33d5d9bd28f65134d50beafebfc75bd41e00ad5ee832a1cd9d6cff8089fc03f8
- Size
  
  325KB
- MD5
  
  f4d6bab1ae5f0408bf7a961ac4e1eec9
- SHA1
  
  730b116f176a14cad5bf6d4795f51c63fb0bef07
- SHA256
  
  33d5d9bd28f65134d50beafebfc75bd41e00ad5ee832a1cd9d6cff8089fc03f8
- SHA512
  
  0638e0164987a791ea192d58051c432bf09091459c8342f6680b1b5aeed33ecf8429ee9153e9719ea8e0102b283fad74c786899d8a651c02a37c6ee55f522a2e
- SSDEEP
  
  6144:PP7fvOn4EsDkGsBOmWCZhVV4E+O13oXc5:37fvOn4EsDkymx0DOn
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan