smokeloader | bc27b3afc72c925df021166fccc262ccf75e2be6f8b04c6772ed36ee8d5a1de0 | Triage

Sharing

General

Target

250205-nezbvsvrhk_pw_infected.zip
Size

1.1MB
Sample

250207-fj4s5s1man
MD5

10c3b083bf2556b548a7758a389cb0d5
SHA1

76cfafac6d51ab522dbb79e5c061dc73ac85148b
SHA256

bc27b3afc72c925df021166fccc262ccf75e2be6f8b04c6772ed36ee8d5a1de0
SHA512

3cfa868331a0c5ea6ba28c9b9287a5f36106c6d46ca77050c4799ce726eb504e4b295e0888da1ae7bf1e02a069115abb516e3f8beeafb064241eec567701d431
SSDEEP

24576:o52GUPjZtUTqphtGxtIS/Vlot58uq5lwQEVdBjU9Dzvxc6qpkNa:o5kHUC2t5c7+wQK7wZpc6IkNa

Score

10^/10

smokeloader backdoor discovery link macro macro_on_action pdf trojan

Malware Config

Targets

- Target
  
  2e33c2010f95cbda8bf0817f1b5c69b51c860c536064182b67261f695f54e1d5
- Size
  
  197B
- MD5
  
  f68acb34a6164d572fd9fae12223c66d
- SHA1
  
  911e0a5ecec7b40883adc6e86383992e043df912
- SHA256
  
  2e33c2010f95cbda8bf0817f1b5c69b51c860c536064182b67261f695f54e1d5
- SHA512
  
  00c624a474d43829703725e70b64c9524f55816a13a2a9c757bf0421c150c9d6239d07e520d03f23b9664c5c458f330d9a3bcf6ed9bf78a0e8d1cb9ddf51c935
Score

1^/10
behavioral1 behavioral2
- Target
  
  a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2
- Size
  
  249KB
- MD5
  
  6476071b5a91ac078350768dc9b2e953
- SHA1
  
  f40fcb5af96c56305a64790ccbaa261c10173782
- SHA256
  
  a059d671d950abee93ef78a170d58a3839c2a465914ab3bd5411e39c89ae55a2
- SHA512
  
  87784413018fea89dff5763d08e00d878af9a3db6b29708dec6fe0d0d3feb4eb8f3efc5c27851d13eb779bd3dedebdcc5958e349b8acc03102f8be6b0dd78f9d
- SSDEEP
  
  6144:H5LCUgHU2L8e3oGdA0UkzFYc5NHuPCYE:H5GUyUC7oeARkjSCYE
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdflinkmacromacro_on_action

behavioral1

behavioral2

behavioral3

smokeloaderbackdoortrojan

behavioral4

smokeloaderbackdoordiscoverytrojan