smokeloader | 363c8a59e1aa5db76fbea9790e8a5d6aea34c91c31058f27b1d74cd61176d473 | Triage

Sharing

General

Target

363c8a59e1aa5db76fbea9790e8a5d6aea34c91c31058f27b1d74cd61176d473
Size

234KB
Sample

240408-fppleahd4z
MD5

ebe71b5ba13ea1a61f3473ef01036eb4
SHA1

29a8e68384ecf60935a61b32b311002a620a85eb
SHA256

363c8a59e1aa5db76fbea9790e8a5d6aea34c91c31058f27b1d74cd61176d473
SHA512

f4c7d5b3ee3d4d1e27ef85b58b877f0d033f31881e96cddab7fe845d487a2b1d575f6bb61caada912b8e2b0b17249eafa0cefabeaa1440805a85e76227112746
SSDEEP

3072:+lzupUvMF2X7BHv1uhtw+LZiXhMFM4aNejxBykNwc45uhGg3eo0jCSETu:nWEF+7Bt/Akf44ePykuci+GDBjCSET

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  363c8a59e1aa5db76fbea9790e8a5d6aea34c91c31058f27b1d74cd61176d473
- Size
  
  234KB
- MD5
  
  ebe71b5ba13ea1a61f3473ef01036eb4
- SHA1
  
  29a8e68384ecf60935a61b32b311002a620a85eb
- SHA256
  
  363c8a59e1aa5db76fbea9790e8a5d6aea34c91c31058f27b1d74cd61176d473
- SHA512
  
  f4c7d5b3ee3d4d1e27ef85b58b877f0d033f31881e96cddab7fe845d487a2b1d575f6bb61caada912b8e2b0b17249eafa0cefabeaa1440805a85e76227112746
- SSDEEP
  
  3072:+lzupUvMF2X7BHv1uhtw+LZiXhMFM4aNejxBykNwc45uhGg3eo0jCSETu:nWEF+7Bt/Akf44ePykuci+GDBjCSET
Score

10^/10

smokeloader pub3 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoortrojan