smokeloader | 3682abb0448a060de759c8d42c157d562c801007bd9adb826df0b9cfa404345a | Triage

Sharing

General

Target

66746e6642dcd7a910466e141b3e869c9c9be362
Size

142KB
Sample

241111-k37rcswmfz
MD5

e2877d46f4d7f96d20ae5913afff60ae
SHA1

66746e6642dcd7a910466e141b3e869c9c9be362
SHA256

3682abb0448a060de759c8d42c157d562c801007bd9adb826df0b9cfa404345a
SHA512

13ed55ff25ffcc55f94cda36d37268faefb6bba399a967ad9b8c98811f53c9d424238d09d8482cef05f53299e7499921982541b56162e9915743fbbc063f32e4
SSDEEP

3072:bAgTDj90qqi5exSvheoN5aQ5pk1cizR2JtWL/DjmGYwRq5z:cmDjDqzShe4Vt+R2JOGGaz

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  55bb098f69061c1addc88a6b259ea2e2c2648c1c2beeaba21079cc465a9ddbe2
- Size
  
  217KB
- MD5
  
  b71c28a6e77add43758eda3512216036
- SHA1
  
  56f231a7ae561962aae1871c099d2cf2c1d543d7
- SHA256
  
  55bb098f69061c1addc88a6b259ea2e2c2648c1c2beeaba21079cc465a9ddbe2
- SHA512
  
  682eeeab128eb559713956192349b8e59120c6859ca85e5e14f3bcbb1a6477421ce225d90784f85f4ff3fd078580585cf291e81d46a4b567d437648f0e5094e0
- SSDEEP
  
  3072:OsKK4G5Pawhm/kLoXLmJXdbBn1W61VX1j5LZ2xOBGqeL6mY3EWeQmGpdDx:OsbSwQMLZ1WGVXAxOBGqeLJ4gD6dD
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan