smokeloader | c532352f685b95a4171d0def0b9f1777abe1450cf21706b72732ff765ec2f084 | Triage

Sharing

General

Target

c532352f685b95a4171d0def0b9f1777abe1450cf21706b72732ff765ec2f084
Size

264KB
Sample

241215-rbvfaayjfl
MD5

a7ebf2100ea8fbf19cda65622fd70404
SHA1

95edcc3467c1d462e729e19644e060d6d42c1eb7
SHA256

c532352f685b95a4171d0def0b9f1777abe1450cf21706b72732ff765ec2f084
SHA512

bfe4d6b33a1ce31ba98ef36e9e2147fd29119a9301f512325ebbc2029b522ccf7e5b9baf333fe77e8ea74e4cb48d42a629b41b9a2e240f5f325f51862ecbe2f2
SSDEEP

6144:Nv2U/Lps+pzz0r6TRVOndPGztqg/1JQ+lmgXdBrA4no:F2Wu+EuTRVOndPGogjQ+9XdB

Score

10^/10

smokeloader 0010 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

0010

Targets

- Target
  
  c532352f685b95a4171d0def0b9f1777abe1450cf21706b72732ff765ec2f084
- Size
  
  264KB
- MD5
  
  a7ebf2100ea8fbf19cda65622fd70404
- SHA1
  
  95edcc3467c1d462e729e19644e060d6d42c1eb7
- SHA256
  
  c532352f685b95a4171d0def0b9f1777abe1450cf21706b72732ff765ec2f084
- SHA512
  
  bfe4d6b33a1ce31ba98ef36e9e2147fd29119a9301f512325ebbc2029b522ccf7e5b9baf333fe77e8ea74e4cb48d42a629b41b9a2e240f5f325f51862ecbe2f2
- SSDEEP
  
  6144:Nv2U/Lps+pzz0r6TRVOndPGztqg/1JQ+lmgXdBrA4no:F2Wu+EuTRVOndPGogjQ+9XdB
Score

10^/10

smokeloader 0010 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader0010backdoordiscoverytrojan

behavioral2

smokeloader0010backdoordiscoverytrojan