smokeloader | 6073c3209dd451cb419adeebcb8b59d29a4e6b9838d957b0aa29b7391b55416c | Triage

Sharing

General

Target

6073c3209dd451cb419adeebcb8b59d29a4e6b9838d957b0aa29b7391b55416c.exe
Size

283KB
Sample

241121-lyzevsvrbp
MD5

220dc52f9d39b5b3583a47179189e6c9
SHA1

90132453d7e8c431bdf8304cf4f3c081775d0822
SHA256

6073c3209dd451cb419adeebcb8b59d29a4e6b9838d957b0aa29b7391b55416c
SHA512

adadcfb9d3d62bfb6e3da1df921bcb333256bd6a391abe8b719dd964d2bb16e0ca97159c2c0f9f2bbcf9952e97ad193867286810ea98add252ca3464ba49bbf2
SSDEEP

6144:5n/WYiBpqOpLe8+BIGsIcmZdv/CfpC2hFpO0TNstvso3oIQe:R/WYiBpqC/lt2vKfRFwYNstvs5y

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  6073c3209dd451cb419adeebcb8b59d29a4e6b9838d957b0aa29b7391b55416c.exe
- Size
  
  283KB
- MD5
  
  220dc52f9d39b5b3583a47179189e6c9
- SHA1
  
  90132453d7e8c431bdf8304cf4f3c081775d0822
- SHA256
  
  6073c3209dd451cb419adeebcb8b59d29a4e6b9838d957b0aa29b7391b55416c
- SHA512
  
  adadcfb9d3d62bfb6e3da1df921bcb333256bd6a391abe8b719dd964d2bb16e0ca97159c2c0f9f2bbcf9952e97ad193867286810ea98add252ca3464ba49bbf2
- SSDEEP
  
  6144:5n/WYiBpqOpLe8+BIGsIcmZdv/CfpC2hFpO0TNstvso3oIQe:R/WYiBpqC/lt2vKfRFwYNstvs5y
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan