smokeloader | 5b1d58d390220db10327b62471cdfe0b72104fc5ac59a40eb70497377200b5ee | Triage

Sharing

General

Target

5b1d58d390220db10327b62471cdfe0b72104fc5ac59a40eb70497377200b5ee
Size

161KB
Sample

240417-qffx1sac91
MD5

daa6902e1f3555262422690df771d212
SHA1

c477c4da714a8db9cfd41790c8630f6df0f8ed39
SHA256

5b1d58d390220db10327b62471cdfe0b72104fc5ac59a40eb70497377200b5ee
SHA512

78c0ef9e02a2d846f8722833d591a4bbcd1ebe20598a068e447d88320c970dd80ec97d548393d4874a5bfa4c3b474266879370c3b19e2a0dbd2ccd15b3648b0d
SSDEEP

3072:R1AbVZB/fHqwAZ1DE2TT9hlVJKjDqYfYixgX4kRxLzlY9PzDo3+oAHru4M:8bVH/svD3n97VpYflx+xHkQOoWup

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  2952319efa611dd3cd0704bd8bf3f6bce423cd88aace8e28e51b19c672d209cf.exe
- Size
  
  309KB
- MD5
  
  26ce123ca4fb973543d48c2da9ece87e
- SHA1
  
  ab474a3c06831b4f673f400f912f77cd3fd154fd
- SHA256
  
  2952319efa611dd3cd0704bd8bf3f6bce423cd88aace8e28e51b19c672d209cf
- SHA512
  
  502aa5d8c6c1a2902f22048d862b7d92a008d5a5c34862bd876851275e8217afad479bf02810de60b06f5ba6a557e758d12dd67418f927c784bb464553eb22b7
- SSDEEP
  
  6144:0L8EEnOV4QFDXk44lMZzx+dzj8aYI0FjT:0BEn+FDXXZVKzgQ0F3
Score

10^/10

smokeloader pub3 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoortrojan