smokeloader | 4da76547d7081b68f3af83c77a5c75b2ff3f0691d7c58aca34632ff2ecd1e98c | Triage

Sharing

General

Target

4da76547d7081b68f3af83c77a5c75b2ff3f0691d7c58aca34632ff2ecd1e98c
Size

307KB
Sample

240417-s2x5jaeb94
MD5

a11d2533c5dd2b17161fc2eea2ba1bef
SHA1

f7f42c054b83cb0cc3bb0a54a75195f920d9ced8
SHA256

4da76547d7081b68f3af83c77a5c75b2ff3f0691d7c58aca34632ff2ecd1e98c
SHA512

0053214e42b72365bd435ab8f35e4ddc8774c347dfa57d90c9f49c81b23dd1178f0a77b0facb0cce0d29b67b33eb7243a5c7c4f267274374e095a47f4a301a0b
SSDEEP

3072:PAeYeaG3VkbDb3fUv+3lSYS+gPdNoMDBNxCkV8lhFna/c2Soqv9m:P0NbFVrSndyNFa/c2SHl

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  4da76547d7081b68f3af83c77a5c75b2ff3f0691d7c58aca34632ff2ecd1e98c
- Size
  
  307KB
- MD5
  
  a11d2533c5dd2b17161fc2eea2ba1bef
- SHA1
  
  f7f42c054b83cb0cc3bb0a54a75195f920d9ced8
- SHA256
  
  4da76547d7081b68f3af83c77a5c75b2ff3f0691d7c58aca34632ff2ecd1e98c
- SHA512
  
  0053214e42b72365bd435ab8f35e4ddc8774c347dfa57d90c9f49c81b23dd1178f0a77b0facb0cce0d29b67b33eb7243a5c7c4f267274374e095a47f4a301a0b
- SSDEEP
  
  3072:PAeYeaG3VkbDb3fUv+3lSYS+gPdNoMDBNxCkV8lhFna/c2Soqv9m:P0NbFVrSndyNFa/c2SHl
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan