smokeloader | 9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5 | Triage

Sharing

General

Target

9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5
Size

38KB
Sample

241118-c5kqlswkcw
MD5

e4b9619368bb4ba38abc708929835f12
SHA1

33ead284ef4cc8d808063c7398cbbe6cf6e68794
SHA256

9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5
SHA512

f1be2c6a79b8aabc639cc7a7e38d7bb2fb9054d2107d0ab7359174ca06e949968d7ff3e7ca381f7a530ff9c462f900b0e6384dbf42909863df830e026f21ac83
SSDEEP

384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5
- Size
  
  38KB
- MD5
  
  e4b9619368bb4ba38abc708929835f12
- SHA1
  
  33ead284ef4cc8d808063c7398cbbe6cf6e68794
- SHA256
  
  9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5
- SHA512
  
  f1be2c6a79b8aabc639cc7a7e38d7bb2fb9054d2107d0ab7359174ca06e949968d7ff3e7ca381f7a530ff9c462f900b0e6384dbf42909863df830e026f21ac83
- SSDEEP
  
  384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan