smokeloader | dcb738e5d9f1d0c7d45fc29638324f9774c4bc7db5d66189686d60d191700b1d | Triage

Sharing

General

Target

dcb738e5d9f1d0c7d45fc29638324f9774c4bc7db5d66189686d60d191700b1dN.exe
Size

288KB
Sample

241222-cgejpayqaq
MD5

c02b57e6771a13513dc087f6b45adab0
SHA1

d2da10a92730ddc0c8d085eff51756aa769e783a
SHA256

dcb738e5d9f1d0c7d45fc29638324f9774c4bc7db5d66189686d60d191700b1d
SHA512

34bfbca9aa8cc7898255429b821cbf0e11a711e0e21bc623178da336780391d282234587152403171f259d637a9e2192bc25aeca6eaea9b98742e040f5563c9b
SSDEEP

6144:CwuVnLdSyrzB26P8udhzGV+kVNf+YzExfDZsuiz/JxEVn:CwuVnMyrzE6P8ufzE+kn+Yg+uijw

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  dcb738e5d9f1d0c7d45fc29638324f9774c4bc7db5d66189686d60d191700b1dN.exe
- Size
  
  288KB
- MD5
  
  c02b57e6771a13513dc087f6b45adab0
- SHA1
  
  d2da10a92730ddc0c8d085eff51756aa769e783a
- SHA256
  
  dcb738e5d9f1d0c7d45fc29638324f9774c4bc7db5d66189686d60d191700b1d
- SHA512
  
  34bfbca9aa8cc7898255429b821cbf0e11a711e0e21bc623178da336780391d282234587152403171f259d637a9e2192bc25aeca6eaea9b98742e040f5563c9b
- SSDEEP
  
  6144:CwuVnLdSyrzB26P8udhzGV+kVNf+YzExfDZsuiz/JxEVn:CwuVnMyrzE6P8ufzE+kn+Yg+uijw
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan