smokeloader | e04f02af7697a106589fa281274a8ce60873902255803ec26b2fc4278cfe2a7a | Triage

Sharing

General

Target

e04f02af7697a106589fa281274a8ce60873902255803ec26b2fc4278cfe2a7a
Size

305KB
Sample

241215-qx6vrsxmhm
MD5

62e9a0a9002954fc9b9b7f3eb6961cea
SHA1

18a360987b4df973d3b5090582bdd03e0ff5cffd
SHA256

e04f02af7697a106589fa281274a8ce60873902255803ec26b2fc4278cfe2a7a
SHA512

750791e2c3c91df5ae3ad946571e232d810ed22bc83303a625a422c230285e9bdd0c5577623b4dc02bb91790769f59abdb5858bc97ad496773a594f49e66ccf3
SSDEEP

6144:bKm+d5Lup7sk6bkPYmQKJ1XniLuqfgGDW0xe7WGwGumP2:bjkKJZ4YQKJ1XnIuiDZxe7NP

Score

10^/10

smokeloader 0009 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

0009

Targets

- Target
  
  e04f02af7697a106589fa281274a8ce60873902255803ec26b2fc4278cfe2a7a
- Size
  
  305KB
- MD5
  
  62e9a0a9002954fc9b9b7f3eb6961cea
- SHA1
  
  18a360987b4df973d3b5090582bdd03e0ff5cffd
- SHA256
  
  e04f02af7697a106589fa281274a8ce60873902255803ec26b2fc4278cfe2a7a
- SHA512
  
  750791e2c3c91df5ae3ad946571e232d810ed22bc83303a625a422c230285e9bdd0c5577623b4dc02bb91790769f59abdb5858bc97ad496773a594f49e66ccf3
- SSDEEP
  
  6144:bKm+d5Lup7sk6bkPYmQKJ1XniLuqfgGDW0xe7WGwGumP2:bjkKJZ4YQKJ1XnIuiDZxe7NP
Score

10^/10

smokeloader 0009 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader0009backdoordiscoverytrojan

behavioral2

smokeloader0009backdoordiscoverytrojan