smokeloader | b6e7e7757e502ded20a0d2010f01cfab0e37d8b70f12efca56e5d75f74fd5dda | Triage

Sharing

General

Target

b6e7e7757e502ded20a0d2010f01cfab0e37d8b70f12efca56e5d75f74fd5dda.exe
Size

285KB
Sample

241122-ll2dpaykcz
MD5

043af6d03988956df9a2c845c50f3de2
SHA1

0d518e3f03bae37d2ad278ee09f65ccfda6d4e12
SHA256

b6e7e7757e502ded20a0d2010f01cfab0e37d8b70f12efca56e5d75f74fd5dda
SHA512

773b5025e4ad1e1b4d89023074b7a1dd4d01814192ed7b3d9b2bd4de6bed1ff32b3ce95a654e96c9c826f7e666dc342c8751bfc7f4d0bd18d5ff2f05c34b22e4
SSDEEP

6144:LnjozYIyIiGOURa4vkbC7wxAwM0ZnTV2hj:zjmviD8zvybAROnTV2l

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  b6e7e7757e502ded20a0d2010f01cfab0e37d8b70f12efca56e5d75f74fd5dda.exe
- Size
  
  285KB
- MD5
  
  043af6d03988956df9a2c845c50f3de2
- SHA1
  
  0d518e3f03bae37d2ad278ee09f65ccfda6d4e12
- SHA256
  
  b6e7e7757e502ded20a0d2010f01cfab0e37d8b70f12efca56e5d75f74fd5dda
- SHA512
  
  773b5025e4ad1e1b4d89023074b7a1dd4d01814192ed7b3d9b2bd4de6bed1ff32b3ce95a654e96c9c826f7e666dc342c8751bfc7f4d0bd18d5ff2f05c34b22e4
- SSDEEP
  
  6144:LnjozYIyIiGOURa4vkbC7wxAwM0ZnTV2hj:zjmviD8zvybAROnTV2l
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan