smokeloader | 256340cafa360c86852d0f2b648e85a9e0957a66f58c0bc572f6b7482bb75135 | Triage

Sharing

General

Target

256340cafa360c86852d0f2b648e85a9e0957a66f58c0bc572f6b7482bb75135
Size

304KB
Sample

241215-qzrhvsxnfq
MD5

cfbe64a303fb6e0000c7859bfb13a1a2
SHA1

a6b85217a3bd9ef76f1235a9ab92384b96b7fede
SHA256

256340cafa360c86852d0f2b648e85a9e0957a66f58c0bc572f6b7482bb75135
SHA512

c411656d43d9b709db77c153da224e2930d26200dc081082d0a4beb0be23b6e63c9e747ec3d650cd670f72c08d79ba40d49c9091344e305a01657916109284b1
SSDEEP

6144:1Bm+cubPaEQnY+HE8iBwA0htiR+G7XnhiD8POg8Lu:1ECrnWfQBwA0riRvUDJg

Score

10^/10

smokeloader 0009 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

0009

Targets

- Target
  
  256340cafa360c86852d0f2b648e85a9e0957a66f58c0bc572f6b7482bb75135
- Size
  
  304KB
- MD5
  
  cfbe64a303fb6e0000c7859bfb13a1a2
- SHA1
  
  a6b85217a3bd9ef76f1235a9ab92384b96b7fede
- SHA256
  
  256340cafa360c86852d0f2b648e85a9e0957a66f58c0bc572f6b7482bb75135
- SHA512
  
  c411656d43d9b709db77c153da224e2930d26200dc081082d0a4beb0be23b6e63c9e747ec3d650cd670f72c08d79ba40d49c9091344e305a01657916109284b1
- SSDEEP
  
  6144:1Bm+cubPaEQnY+HE8iBwA0htiR+G7XnhiD8POg8Lu:1ECrnWfQBwA0riRvUDJg
Score

10^/10

smokeloader 0009 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader0009backdoordiscoverytrojan

behavioral2

smokeloader0009backdoordiscoverytrojan