smokeloader | 2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b | Triage

Sharing

General

Target

2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
Size

204KB
Sample

240523-2z3rnscf6v
MD5

3c85a563d1783ae7e37da0d68e2fc834
SHA1

c4afd3247a9bf9386815099bfee5ffc0bd2376db
SHA256

2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
SHA512

7ac0b26b73440593bf1ff299541f086798e4768410f42cfa404ec2c267ce5d3fd05cb9462c66a50a99095544e427c59abd45afa4fd18113da6e8cb93f826a8de
SSDEEP

3072:YkBkW8LXXrWkZv+Zs6NZdMGcKR8ifY13t1u4HZIfA3WKTLYS:YFjLXy00zGKRffY1dUIZT3WkY

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
- Size
  
  204KB
- MD5
  
  3c85a563d1783ae7e37da0d68e2fc834
- SHA1
  
  c4afd3247a9bf9386815099bfee5ffc0bd2376db
- SHA256
  
  2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
- SHA512
  
  7ac0b26b73440593bf1ff299541f086798e4768410f42cfa404ec2c267ce5d3fd05cb9462c66a50a99095544e427c59abd45afa4fd18113da6e8cb93f826a8de
- SSDEEP
  
  3072:YkBkW8LXXrWkZv+Zs6NZdMGcKR8ifY13t1u4HZIfA3WKTLYS:YFjLXy00zGKRffY1dUIZT3WkY
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan