smokeloader | bc887fcd6805824ac58a107917c6d083056d688eef39e979da25d16eb388e798 | Triage

Sharing

General

Target

bc887fcd6805824ac58a107917c6d083056d688eef39e979da25d16eb388e798
Size

240KB
Sample

241219-rhmc9atpex
MD5

3bbac642557b0ab934addbac0594561c
SHA1

0787a06f1fff51bdfdb129186df44e73d8c7d5de
SHA256

bc887fcd6805824ac58a107917c6d083056d688eef39e979da25d16eb388e798
SHA512

c91cbc77b3a67f65082f5d8187f237b9de0a6aaf1cbfb7bbd0e3157d2b8815f55a6ed71d6bda88941daed67ad6f0ee9a9e98149f11b053f81a462e17f7145730
SSDEEP

3072:VC2pwqpX3QufagAKaKkWvqMFh1KjP40ZZ6s5dM6Y273v9blsf:I4wqpX3qgAKaIvqRjBZVM/y

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  bc887fcd6805824ac58a107917c6d083056d688eef39e979da25d16eb388e798
- Size
  
  240KB
- MD5
  
  3bbac642557b0ab934addbac0594561c
- SHA1
  
  0787a06f1fff51bdfdb129186df44e73d8c7d5de
- SHA256
  
  bc887fcd6805824ac58a107917c6d083056d688eef39e979da25d16eb388e798
- SHA512
  
  c91cbc77b3a67f65082f5d8187f237b9de0a6aaf1cbfb7bbd0e3157d2b8815f55a6ed71d6bda88941daed67ad6f0ee9a9e98149f11b053f81a462e17f7145730
- SSDEEP
  
  3072:VC2pwqpX3QufagAKaKkWvqMFh1KjP40ZZ6s5dM6Y273v9blsf:I4wqpX3qgAKaIvqRjBZVM/y
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan