smokeloader | cab8ce1b9026b804505c128b7da21af759db3007b134c1ab6e232ce27e0fd6f9 | Triage

Sharing

General

Target

cab8ce1b9026b804505c128b7da21af759db3007b134c1ab6e232ce27e0fd6f9.exe
Size

316KB
Sample

250318-kf2ltsxzdw
MD5

4b6e5ff9bcbb5406d3cef88a56998442
SHA1

2e2b979be99c62db33a88d2425dec9a000b78f5b
SHA256

cab8ce1b9026b804505c128b7da21af759db3007b134c1ab6e232ce27e0fd6f9
SHA512

ad71e7bcee744dd8dc6f36cf82b314d96bbadb20ba1651ca8e2bfd0ed02fae65696a99a49c4919822be19e4f937325da5f639a887b6dfdaa348b328cd4038fb5
SSDEEP

3072:h0LMESlyRIRn+ccKeEXRXiY5ZYJi11fqR+XYqdMYuFuh8S1obL7K6d:mkZnRRprSRVqtuFu6Si

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  cab8ce1b9026b804505c128b7da21af759db3007b134c1ab6e232ce27e0fd6f9.exe
- Size
  
  316KB
- MD5
  
  4b6e5ff9bcbb5406d3cef88a56998442
- SHA1
  
  2e2b979be99c62db33a88d2425dec9a000b78f5b
- SHA256
  
  cab8ce1b9026b804505c128b7da21af759db3007b134c1ab6e232ce27e0fd6f9
- SHA512
  
  ad71e7bcee744dd8dc6f36cf82b314d96bbadb20ba1651ca8e2bfd0ed02fae65696a99a49c4919822be19e4f937325da5f639a887b6dfdaa348b328cd4038fb5
- SSDEEP
  
  3072:h0LMESlyRIRn+ccKeEXRXiY5ZYJi11fqR+XYqdMYuFuh8S1obL7K6d:mkZnRRprSRVqtuFu6Si
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan