smokeloader | f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3 | Triage

Sharing

General

Target

f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3
Size

261KB
Sample

240501-3xl7ksah4t
MD5

d4a824b455f581031c959f4431977e94
SHA1

85dd7d196e585c1c1d2d28ce4bbe4647da079588
SHA256

f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3
SHA512

3e377db899365a4f48bbab1e97ccceaf6284551616ad8f1bf2af65478d28500ce4b1a1cd798968fc13934bf324e1aaecd5223a6a59cf035f4145bf3baf2ccb07
SSDEEP

3072:jfiqHnFC8bq8sb+UAi21LiFOMQy5BJ6pLg1T/dO:jfiqHnFDg+xfpmJrt/w

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3
- Size
  
  261KB
- MD5
  
  d4a824b455f581031c959f4431977e94
- SHA1
  
  85dd7d196e585c1c1d2d28ce4bbe4647da079588
- SHA256
  
  f9be6fbe073f8e75344c62adff1a729494acafa18ea7c778cd0b3177a77de0f3
- SHA512
  
  3e377db899365a4f48bbab1e97ccceaf6284551616ad8f1bf2af65478d28500ce4b1a1cd798968fc13934bf324e1aaecd5223a6a59cf035f4145bf3baf2ccb07
- SSDEEP
  
  3072:jfiqHnFC8bq8sb+UAi21LiFOMQy5BJ6pLg1T/dO:jfiqHnFDg+xfpmJrt/w
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan