smokeloader | 5952dee2554c631d57a885a41bd148b18d15cebdece6df6dc11870e8ce25f2a7 | Triage

Sharing

General

Target

5952dee2554c631d57a885a41bd148b18d15cebdece6df6dc11870e8ce25f2a7
Size

290KB
Sample

241215-rk9assymfk
MD5

b159fd7a71b9fa4b7741fc5b6480b015
SHA1

753508d337aed1fdb5d9bec89d53ac91e26ccd53
SHA256

5952dee2554c631d57a885a41bd148b18d15cebdece6df6dc11870e8ce25f2a7
SHA512

3e95e0bbc7afe3218efe5615786f13a03735d337b7a6d62cecf65e93e6ca4263f1f7f696e0af1e32fa616d4c2975412c515ca977b73d01c8f2addee5be9c23aa
SSDEEP

3072:67+kKcbyRoiOqtVyBsQGGxagtclc+pF5Nczdh0Em+z+rgsq98RKTGHTq4Y8WYAgI:3oiFtVyB1agGK+HMzdhsrgMfHrQHr2

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  5952dee2554c631d57a885a41bd148b18d15cebdece6df6dc11870e8ce25f2a7
- Size
  
  290KB
- MD5
  
  b159fd7a71b9fa4b7741fc5b6480b015
- SHA1
  
  753508d337aed1fdb5d9bec89d53ac91e26ccd53
- SHA256
  
  5952dee2554c631d57a885a41bd148b18d15cebdece6df6dc11870e8ce25f2a7
- SHA512
  
  3e95e0bbc7afe3218efe5615786f13a03735d337b7a6d62cecf65e93e6ca4263f1f7f696e0af1e32fa616d4c2975412c515ca977b73d01c8f2addee5be9c23aa
- SSDEEP
  
  3072:67+kKcbyRoiOqtVyBsQGGxagtclc+pF5Nczdh0Em+z+rgsq98RKTGHTq4Y8WYAgI:3oiFtVyB1agGK+HMzdhsrgMfHrQHr2
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan