smokeloader | 0cb77ffcd9e042fc71ffd1efd5ea4f6f3eb1a4ab48b85d27218a7ac98707f5fb | Triage

Sharing

General

Target

0cb77ffcd9e042fc71ffd1efd5ea4f6f3eb1a4ab48b85d27218a7ac98707f5fb
Size

222KB
Sample

241111-lz4e7sxerp
MD5

1d4dec8942a16a3a5bf5685a88d4748b
SHA1

d31f7bd888edd2b284a3aa2badce3c7e35cfe077
SHA256

0cb77ffcd9e042fc71ffd1efd5ea4f6f3eb1a4ab48b85d27218a7ac98707f5fb
SHA512

f353df240b5da00f844d5f159140675058d9f9291d9a36f312d8d58d5a62449a416912637d58930c56ea4cc17199f299cb6ff70153e9c1f512b1149afaaeb015
SSDEEP

6144:K3YvfibynezL3P+nydgpajRApD6zL8tNGXvE2hxGuk8iT:KoSbsq+H4jRApDqATiiT

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  ff83c4bf846c89ce707547b8ac98921982e1bfffb603c6e07d73395a0c13691b.exe
- Size
  
  339KB
- MD5
  
  6c8510622324dbe7e235200226d2474f
- SHA1
  
  7020efdc04e573010be346f228e03813bab3dbae
- SHA256
  
  ff83c4bf846c89ce707547b8ac98921982e1bfffb603c6e07d73395a0c13691b
- SHA512
  
  f33c2d9bb3e4b92c9e5081f91db0aaa45890f0d06dc33bd208c51d3086b781ae551ceb30e1717d445a878cdfb3acb90dd0a739cc55b1e792324a7e48e8f02452
- SSDEEP
  
  6144:S6vmlLvL/eoOM/o5VuNosx374OPZElnyHSn0cg8QY:S6vmlX/4M/IVSorOkTn0J
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan