smokeloader | 799d3aa50555efa8d415363154cb06e7297f8fee2f0d5adc0df5cec4c8ceba2a | Triage

Sharing

General

Target

799d3aa50555efa8d415363154cb06e7297f8fee2f0d5adc0df5cec4c8ceba2a
Size

252KB
Sample

241215-q7da7swld1
MD5

4188db68aa00f9c87a7fdeb95257bb32
SHA1

f396f85e0c2ebc9d1e1dabd2f286c81b600fcf51
SHA256

799d3aa50555efa8d415363154cb06e7297f8fee2f0d5adc0df5cec4c8ceba2a
SHA512

6daaa4fe107db92a02b7b1b5b971be57d39edd095deb78ea61d7a22da714e18314b5709f26ceb4e21e39d18f633e2d8d9fb83d7c6aa9380b4f831af77d540c65
SSDEEP

3072:Bx17o+X3PvCxwVHaHHUbIbt+sB2BGrtQK2sxkgaBChUpZa9uD6Vdyhk:z1sKPvCxwV6ft+sQQRQKjiga3wVf

Score

10^/10

smokeloader 0009 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

0009

Targets

- Target
  
  799d3aa50555efa8d415363154cb06e7297f8fee2f0d5adc0df5cec4c8ceba2a
- Size
  
  252KB
- MD5
  
  4188db68aa00f9c87a7fdeb95257bb32
- SHA1
  
  f396f85e0c2ebc9d1e1dabd2f286c81b600fcf51
- SHA256
  
  799d3aa50555efa8d415363154cb06e7297f8fee2f0d5adc0df5cec4c8ceba2a
- SHA512
  
  6daaa4fe107db92a02b7b1b5b971be57d39edd095deb78ea61d7a22da714e18314b5709f26ceb4e21e39d18f633e2d8d9fb83d7c6aa9380b4f831af77d540c65
- SSDEEP
  
  3072:Bx17o+X3PvCxwVHaHHUbIbt+sB2BGrtQK2sxkgaBChUpZa9uD6Vdyhk:z1sKPvCxwV6ft+sQQRQKjiga3wVf
Score

10^/10

smokeloader 0009 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader0009backdoordiscoverytrojan

behavioral2

smokeloader0009backdoordiscoverytrojan