smokeloader | b3c8b783e74467e2e1e8264f0e560e07d2aead3bd1d98f98d4fcc5303675d4e3 | Triage

Sharing

General

Target

b3c8b783e74467e2e1e8264f0e560e07d2aead3bd1d98f98d4fcc5303675d4e3
Size

303KB
Sample

241215-q44c8awkgx
MD5

48201775e5f24691ae42e983c7179ef9
SHA1

67a3cbafff096b126bbced17c07792fbc287f7f2
SHA256

b3c8b783e74467e2e1e8264f0e560e07d2aead3bd1d98f98d4fcc5303675d4e3
SHA512

0e60c492ce1d14fefc0f3ec88645202355a4b5864011c6382945f418eff6a5c5f99cb3af6a1aca243f037f1f4bb13a60e532d234f560449bd8ce996536512d2f
SSDEEP

6144:GgWNRAm6S/6Pom8GmK22P63UebTB22tThsIeGjY6:Aim+QjGmK22ib922ZVE

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  b3c8b783e74467e2e1e8264f0e560e07d2aead3bd1d98f98d4fcc5303675d4e3
- Size
  
  303KB
- MD5
  
  48201775e5f24691ae42e983c7179ef9
- SHA1
  
  67a3cbafff096b126bbced17c07792fbc287f7f2
- SHA256
  
  b3c8b783e74467e2e1e8264f0e560e07d2aead3bd1d98f98d4fcc5303675d4e3
- SHA512
  
  0e60c492ce1d14fefc0f3ec88645202355a4b5864011c6382945f418eff6a5c5f99cb3af6a1aca243f037f1f4bb13a60e532d234f560449bd8ce996536512d2f
- SSDEEP
  
  6144:GgWNRAm6S/6Pom8GmK22P63UebTB22tThsIeGjY6:Aim+QjGmK22ib922ZVE
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan