smokeloader | 198b6aba26ebae3961fdd6e9f9bcef1508d859e79be383ec52ab47beb7138888 | Triage

Sharing

General

Target

198b6aba26ebae3961fdd6e9f9bcef1508d859e79be383ec52ab47beb7138888.exe
Size

232KB
Sample

241122-1kv8lswlfr
MD5

9a180474bfbd301820f861eeb9042306
SHA1

a45142da2ca375cc9e287cf096c6be98b8a81b03
SHA256

198b6aba26ebae3961fdd6e9f9bcef1508d859e79be383ec52ab47beb7138888
SHA512

fd9b8329ca7c20ba57d1871a0ebaeaf2013b891e0d7e796beac507362abc30e8385a023d274922b5ae91f2b35b10277c3a21398e35f0447a473c62316ce18d29
SSDEEP

6144:zXDBpNzp9mNUaFrQbcqX7tNfVXVHQLIiu8cj:zXvNz2QbcwZGEX8cj

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  198b6aba26ebae3961fdd6e9f9bcef1508d859e79be383ec52ab47beb7138888.exe
- Size
  
  232KB
- MD5
  
  9a180474bfbd301820f861eeb9042306
- SHA1
  
  a45142da2ca375cc9e287cf096c6be98b8a81b03
- SHA256
  
  198b6aba26ebae3961fdd6e9f9bcef1508d859e79be383ec52ab47beb7138888
- SHA512
  
  fd9b8329ca7c20ba57d1871a0ebaeaf2013b891e0d7e796beac507362abc30e8385a023d274922b5ae91f2b35b10277c3a21398e35f0447a473c62316ce18d29
- SSDEEP
  
  6144:zXDBpNzp9mNUaFrQbcqX7tNfVXVHQLIiu8cj:zXvNz2QbcwZGEX8cj
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan