smokeloader | 37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f | Triage

Submit
Reports

Overview

overview

Static

static

3

37419d3a8a...5f.exe

windows7-x64

Sharing

General

Target

37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f.exe
Size

248KB
Sample

241118-bs2mxsvble
MD5

1f243595efaa54f6c37a089ec7847c6d
SHA1

83eb38d9f85bdcf12cb781fad34ceb1e31b34b5a
SHA256

37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f
SHA512

58e936e2c5b44a489c75494102228d11d6aa6d3e26e687f20923437c1d44b2e9af5533e3ea53c178c2bc70d656f913158dbc0f5cd8cdc7a3738cba8ad6cbff55
SSDEEP

3072:IDGh7pXYLE2d5+8XTQhtetONYWO9jfBU393KySv53brCTxI:RpXYLEcfXT3hRfG3kyevCFI

Score

10^/10

smokeloader backdoor credential_access discovery persistence privilege_escalation stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f.exe

Resource

win7-20241010-en

smokeloader backdoor credential_access discovery persistence privilege_escalation stealer trojan

windows7-x64

13 signatures

300 seconds

Malware Config

Targets

- Target
  
  37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f.exe
- Size
  
  248KB
- MD5
  
  1f243595efaa54f6c37a089ec7847c6d
- SHA1
  
  83eb38d9f85bdcf12cb781fad34ceb1e31b34b5a
- SHA256
  
  37419d3a8a50d2e5bc0eef676a37d6757ba43a64eff868edb4af5c386900235f
- SHA512
  
  58e936e2c5b44a489c75494102228d11d6aa6d3e26e687f20923437c1d44b2e9af5533e3ea53c178c2bc70d656f913158dbc0f5cd8cdc7a3738cba8ad6cbff55
- SSDEEP
  
  3072:IDGh7pXYLE2d5+8XTQhtetONYWO9jfBU393KySv53brCTxI:RpXYLEcfXT3hRfG3kyevCFI
Score

10^/10

smokeloader backdoor credential_access discovery persistence privilege_escalation stealer trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Credentials from Password Stores

Windows Credential Manager

Discovery

Browser Information Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoorcredential_accessdiscoverypersistenceprivilege_escalationstealertrojan

© 2018-2024

Terms | Privacy