smokeloader | cc4cb393dfc2c8fef2d76f297554a93cbec91244fe7ad5dc3ab533018d52fc84 | Triage

Sharing

General

Target

cc4cb393dfc2c8fef2d76f297554a93cbec91244fe7ad5dc3ab533018d52fc84
Size

254KB
Sample

241201-ry6rtstnaz
MD5

5212ecaf2c3880d92f371356d84105be
SHA1

d17cc3b0083fef207a84eefbb927ac9a79ef01ae
SHA256

cc4cb393dfc2c8fef2d76f297554a93cbec91244fe7ad5dc3ab533018d52fc84
SHA512

a1987d88d57e2a835f81b771da0bd8f8d26800d023d088558a688979bd876a8f142fdfe2b2462907be6401152fc3ec7dd87bae0749e118c9ca82080963253a09
SSDEEP

3072:Gl6mR5pZ1bjBUEzlFJYPBWk8XMF5uaaaETz:+XpZRj2yY5p4RaavT

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  cc4cb393dfc2c8fef2d76f297554a93cbec91244fe7ad5dc3ab533018d52fc84
- Size
  
  254KB
- MD5
  
  5212ecaf2c3880d92f371356d84105be
- SHA1
  
  d17cc3b0083fef207a84eefbb927ac9a79ef01ae
- SHA256
  
  cc4cb393dfc2c8fef2d76f297554a93cbec91244fe7ad5dc3ab533018d52fc84
- SHA512
  
  a1987d88d57e2a835f81b771da0bd8f8d26800d023d088558a688979bd876a8f142fdfe2b2462907be6401152fc3ec7dd87bae0749e118c9ca82080963253a09
- SSDEEP
  
  3072:Gl6mR5pZ1bjBUEzlFJYPBWk8XMF5uaaaETz:+XpZRj2yY5p4RaavT
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan