smokeloader | 572831b4dcb5d526f669bbb81f011b1b0abd5e5f3d44642c34d5c3d60f8119b5 | Triage

Sharing

General

Target

572831b4dcb5d526f669bbb81f011b1b0abd5e5f3d44642c34d5c3d60f8119b5
Size

279KB
Sample

240430-3sv9pacf87
MD5

6cf5467cb6baf7f36a68b8d201472437
SHA1

dcc57b51295957ac135c0bc7617865eb32c81650
SHA256

572831b4dcb5d526f669bbb81f011b1b0abd5e5f3d44642c34d5c3d60f8119b5
SHA512

8cc7cd2335c20a816120e4c67d1846de517d4ea5e995096722481d3906bc0ab31b7f61d536f7690b79ef8f799fe97ada1dbdefc883f1873b03f2c1944ffa5b28
SSDEEP

3072:XYqW1BHlxlpbbOujI+R+gT0AA5qpH6BaSeNS3EzlohwdO8YfNn4kYpuNb9AhLgVQ:XYqC9AkIFgTwKFEE5o7NnBBqk

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  572831b4dcb5d526f669bbb81f011b1b0abd5e5f3d44642c34d5c3d60f8119b5
- Size
  
  279KB
- MD5
  
  6cf5467cb6baf7f36a68b8d201472437
- SHA1
  
  dcc57b51295957ac135c0bc7617865eb32c81650
- SHA256
  
  572831b4dcb5d526f669bbb81f011b1b0abd5e5f3d44642c34d5c3d60f8119b5
- SHA512
  
  8cc7cd2335c20a816120e4c67d1846de517d4ea5e995096722481d3906bc0ab31b7f61d536f7690b79ef8f799fe97ada1dbdefc883f1873b03f2c1944ffa5b28
- SSDEEP
  
  3072:XYqW1BHlxlpbbOujI+R+gT0AA5qpH6BaSeNS3EzlohwdO8YfNn4kYpuNb9AhLgVQ:XYqC9AkIFgTwKFEE5o7NnBBqk
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan