smokeloader | 998087f8f6a9ed44ee709505330003d642806e45f45f42b9eaa3b9f0e317586f | Triage

Sharing

General

Target

998087f8f6a9ed44ee709505330003d642806e45f45f42b9eaa3b9f0e317586f
Size

210KB
Sample

241215-q17lgawjgy
MD5

ef02eecacc8bf41e4689d988d5640445
SHA1

ccac360bdbe713f2c868b04584175d3e31709507
SHA256

998087f8f6a9ed44ee709505330003d642806e45f45f42b9eaa3b9f0e317586f
SHA512

8c258f29061901f894b96493cdf1b088a42aae4095fbb965266aac3dbc4bc399a3be2854186a17274f61b2f132a2bedafcaf3a91aba4787d49853fd482d6a1ca
SSDEEP

1536:RXEnKClWpHOKJdGapjZ3eYkaBnP/k9cP664W7BFweCGswa5g0Af4x5KaM4BW6m:RX9ClWhKSxky576Gxa5gBf4x53A

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  998087f8f6a9ed44ee709505330003d642806e45f45f42b9eaa3b9f0e317586f
- Size
  
  210KB
- MD5
  
  ef02eecacc8bf41e4689d988d5640445
- SHA1
  
  ccac360bdbe713f2c868b04584175d3e31709507
- SHA256
  
  998087f8f6a9ed44ee709505330003d642806e45f45f42b9eaa3b9f0e317586f
- SHA512
  
  8c258f29061901f894b96493cdf1b088a42aae4095fbb965266aac3dbc4bc399a3be2854186a17274f61b2f132a2bedafcaf3a91aba4787d49853fd482d6a1ca
- SSDEEP
  
  1536:RXEnKClWpHOKJdGapjZ3eYkaBnP/k9cP664W7BFweCGswa5g0Af4x5KaM4BW6m:RX9ClWhKSxky576Gxa5gBf4x53A
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan