smokeloader | 935816fdefa493853d763ff723b4f31a2dad3aa833813364bf9fce8b1b982869 | Triage

Sharing

General

Target

2160-2-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

250201-vd3ffs1mey
MD5

a20034626cc0be4dcfda1005267c3fa8
SHA1

fc81fc9bf2c1813b2344743dbcecf025c03f9286
SHA256

935816fdefa493853d763ff723b4f31a2dad3aa833813364bf9fce8b1b982869
SHA512

a149bc180016a923f6ba52ad0e1bc289ae47e1a178345b904077235d3b68a9c0da9cd57cdc37d84070dcea6a37cb87ccb2cbc8b00b697af49d7b068f46c23b50
SSDEEP

768:n9NPT/8Bf+TDWg5IwcxzrDcTtfnMS75UkSScLicS:DTUuDWg5IwEDcpnM+5UkSM

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2160-2-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  a20034626cc0be4dcfda1005267c3fa8
- SHA1
  
  fc81fc9bf2c1813b2344743dbcecf025c03f9286
- SHA256
  
  935816fdefa493853d763ff723b4f31a2dad3aa833813364bf9fce8b1b982869
- SHA512
  
  a149bc180016a923f6ba52ad0e1bc289ae47e1a178345b904077235d3b68a9c0da9cd57cdc37d84070dcea6a37cb87ccb2cbc8b00b697af49d7b068f46c23b50
- SSDEEP
  
  768:n9NPT/8Bf+TDWg5IwcxzrDcTtfnMS75UkSScLicS:DTUuDWg5IwEDcpnM+5UkSM
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan