smokeloader | 5b292de4fc907bf09e8409ba9aea78c65bee85cb1b34e9516a9de35323f7306f | Triage

Sharing

General

Target

5b292de4fc907bf09e8409ba9aea78c65bee85cb1b34e9516a9de35323f7306f.exe
Size

233KB
Sample

241120-zf3w8asqdt
MD5

a6d789f7f381a9d824e67ed2b2104d66
SHA1

04db9745d3862bf84c03efcd30190ffeb3343f14
SHA256

5b292de4fc907bf09e8409ba9aea78c65bee85cb1b34e9516a9de35323f7306f
SHA512

5ff2bf11610b2f646406020dad334291fdb6b1d1a1e043aceee1b163d4c96611e5bc29f7667577f20a59f177c5c31fab2a529efc171dbfdf084a12a394cc695e
SSDEEP

3072:FGhKSUgxInv9/zRt2aKcyQD6P5yiRMZINT44+CNf4/AWaSkSJu98vdz:hgxInv972aKcyd5yiRIINT4CIADG8elz

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  5b292de4fc907bf09e8409ba9aea78c65bee85cb1b34e9516a9de35323f7306f.exe
- Size
  
  233KB
- MD5
  
  a6d789f7f381a9d824e67ed2b2104d66
- SHA1
  
  04db9745d3862bf84c03efcd30190ffeb3343f14
- SHA256
  
  5b292de4fc907bf09e8409ba9aea78c65bee85cb1b34e9516a9de35323f7306f
- SHA512
  
  5ff2bf11610b2f646406020dad334291fdb6b1d1a1e043aceee1b163d4c96611e5bc29f7667577f20a59f177c5c31fab2a529efc171dbfdf084a12a394cc695e
- SSDEEP
  
  3072:FGhKSUgxInv9/zRt2aKcyQD6P5yiRMZINT44+CNf4/AWaSkSJu98vdz:hgxInv972aKcyd5yiRIINT4CIADG8elz
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan