smokeloader | bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc | Triage

Sharing

General

Target

bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc
Size

224KB
Sample

240514-wd8sxage6v
MD5

300ec4cb5fb7349183bf02c31bc67df3
SHA1

6e42195f6cc83e15f2bc23e3c10acf43b2cca695
SHA256

bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc
SHA512

e14bd68a87577763ebe4bd9b45cc1df5e90f4c134e5c031f0236b34cff35c72ae33c83ecc0865a340ec08ca9c5f767f0dc27c270829edd82b40f9e5c94d7488d
SSDEEP

3072:yCoM+wvHbJKfpnxdRV+qBvExEN/G8S8vjM1J3aKV7ZKx:KwPkddVQxMe8S8vj6an

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc
- Size
  
  224KB
- MD5
  
  300ec4cb5fb7349183bf02c31bc67df3
- SHA1
  
  6e42195f6cc83e15f2bc23e3c10acf43b2cca695
- SHA256
  
  bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc
- SHA512
  
  e14bd68a87577763ebe4bd9b45cc1df5e90f4c134e5c031f0236b34cff35c72ae33c83ecc0865a340ec08ca9c5f767f0dc27c270829edd82b40f9e5c94d7488d
- SSDEEP
  
  3072:yCoM+wvHbJKfpnxdRV+qBvExEN/G8S8vjM1J3aKV7ZKx:KwPkddVQxMe8S8vj6an
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan