smokeloader | 68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9 | Triage

Sharing

General

Target

68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9
Size

222KB
Sample

240429-fp8dhsbe6s
MD5

bdf4f4c6fd2011a7de032a5b9be5aae9
SHA1

2a3eea3f0f773018f883602bfda21ffd37f28b1e
SHA256

68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9
SHA512

4f72d40e6533c2f656fced65ba190451155b22019862a0fbb91e3069bb104e692a85ba40efb1a3712e46270c20d0ada48330a42e3746d73a917a1369d77c6f69
SSDEEP

3072:vz72zjy9g72urLJsyw7utXmXCExCqd17RhGB5KPHdX5Elx:Oy9glFsyuu8yETZPGmPHbg

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9
- Size
  
  222KB
- MD5
  
  bdf4f4c6fd2011a7de032a5b9be5aae9
- SHA1
  
  2a3eea3f0f773018f883602bfda21ffd37f28b1e
- SHA256
  
  68403773e095775f509e4dbf199a54dfce594077cb8195c48de1eb3c26abf2c9
- SHA512
  
  4f72d40e6533c2f656fced65ba190451155b22019862a0fbb91e3069bb104e692a85ba40efb1a3712e46270c20d0ada48330a42e3746d73a917a1369d77c6f69
- SSDEEP
  
  3072:vz72zjy9g72urLJsyw7utXmXCExCqd17RhGB5KPHdX5Elx:Oy9glFsyuu8yETZPGmPHbg
Score

10^/10

smokeloader pub3 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoortrojan