smokeloader | c812242a8cf1ebca3d72479d271863327d4c684deecfe9282516abcc6e68caa6 | Triage

Sharing

General

Target

c812242a8cf1ebca3d72479d271863327d4c684deecfe9282516abcc6e68caa6.exe
Size

164KB
Sample

250318-kc4a9axygz
MD5

ce867b0c0346970429f05d962f40803a
SHA1

296824838f9ba43af6c5c598a02538a1d34a3042
SHA256

c812242a8cf1ebca3d72479d271863327d4c684deecfe9282516abcc6e68caa6
SHA512

5ae880edcbb19020846ddab7f51bdf08b240063bcdc0eff1d75f3f49a0d9b19abb8e71b4852d70f1562155c1086024190a190caa34f19be063f95b0e8449621c
SSDEEP

3072:RuXo/Nx9mi67TPKbsQKz4Vq4b34HXRo1WC+NQrE:RioVOigWbi6q4boHXunr

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  c812242a8cf1ebca3d72479d271863327d4c684deecfe9282516abcc6e68caa6.exe
- Size
  
  164KB
- MD5
  
  ce867b0c0346970429f05d962f40803a
- SHA1
  
  296824838f9ba43af6c5c598a02538a1d34a3042
- SHA256
  
  c812242a8cf1ebca3d72479d271863327d4c684deecfe9282516abcc6e68caa6
- SHA512
  
  5ae880edcbb19020846ddab7f51bdf08b240063bcdc0eff1d75f3f49a0d9b19abb8e71b4852d70f1562155c1086024190a190caa34f19be063f95b0e8449621c
- SSDEEP
  
  3072:RuXo/Nx9mi67TPKbsQKz4Vq4b34HXRo1WC+NQrE:RioVOigWbi6q4boHXunr
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan