smokeloader | 61a2330ee11441fcf0e633aab6b0a0979f8cd3d62bfa894069478d5cc6b30798 | Triage

Sharing

General

Target

c3938692.exe
Size

35KB
Sample

250127-m1x59avnes
MD5

6bf266050d554a65c61d85cf98558032
SHA1

34a234bb3bd5a75fc708a95f1c1c5a61ea4687a7
SHA256

61a2330ee11441fcf0e633aab6b0a0979f8cd3d62bfa894069478d5cc6b30798
SHA512

047862d2c904a20c0d88f1697dcc466349493b5e25e9884729c387c6df4ae8ee45c0a9479a0a7cf4abbb034b64acc524847ba30dbd81453ad70281475d1b1857
SSDEEP

384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  c3938692.exe
- Size
  
  35KB
- MD5
  
  6bf266050d554a65c61d85cf98558032
- SHA1
  
  34a234bb3bd5a75fc708a95f1c1c5a61ea4687a7
- SHA256
  
  61a2330ee11441fcf0e633aab6b0a0979f8cd3d62bfa894069478d5cc6b30798
- SHA512
  
  047862d2c904a20c0d88f1697dcc466349493b5e25e9884729c387c6df4ae8ee45c0a9479a0a7cf4abbb034b64acc524847ba30dbd81453ad70281475d1b1857
- SSDEEP
  
  384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan