smokeloader | 0847f4e9b91454c3ee68fdb96b88f8c1e58db5ba627d7777d5e4299d98ce29a9 | Triage

Sharing

General

Target

0847f4e9b91454c3ee68fdb96b88f8c1e58db5ba627d7777d5e4299d98ce29a9
Size

326KB
Sample

240504-kfsc6agf7v
MD5

6b303bc0fde8242376d2f888da69ca35
SHA1

5301d317db4d8c217eb290ca30f3b64ff76f5f0c
SHA256

0847f4e9b91454c3ee68fdb96b88f8c1e58db5ba627d7777d5e4299d98ce29a9
SHA512

c0a1b10b0a5252ee8a3be19b067a6e2d316b417fc91e891830b64b26230eb0f9c4310ff464d53c41d95b8e04000315b86bf81244bb92518298dfbbd508104475
SSDEEP

3072:8IWR2u2TICpQXe1KD09lzV+fxuCIE40oXBqS364B6onNuz24PqhncTGGYo5vBFun:fTXvsoXVqToxqm6MrADGGYolTb/5

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  0847f4e9b91454c3ee68fdb96b88f8c1e58db5ba627d7777d5e4299d98ce29a9
- Size
  
  326KB
- MD5
  
  6b303bc0fde8242376d2f888da69ca35
- SHA1
  
  5301d317db4d8c217eb290ca30f3b64ff76f5f0c
- SHA256
  
  0847f4e9b91454c3ee68fdb96b88f8c1e58db5ba627d7777d5e4299d98ce29a9
- SHA512
  
  c0a1b10b0a5252ee8a3be19b067a6e2d316b417fc91e891830b64b26230eb0f9c4310ff464d53c41d95b8e04000315b86bf81244bb92518298dfbbd508104475
- SSDEEP
  
  3072:8IWR2u2TICpQXe1KD09lzV+fxuCIE40oXBqS364B6onNuz24PqhncTGGYo5vBFun:fTXvsoXVqToxqm6MrADGGYolTb/5
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2