smokeloader | 0c57cba31bd9c3703f929e9f856cafc33a14c7142d49f171e9f4438930a56d7b | Triage

Sharing

General

Target

0c57cba31bd9c3703f929e9f856cafc33a14c7142d49f171e9f4438930a56d7b
Size

259KB
Sample

240526-vl1ltsde5x
MD5

6b95f92d87e9eebacab03cc523d8733f
SHA1

d2ceb1939fd73e13d83ab98673f6c571560c9e63
SHA256

0c57cba31bd9c3703f929e9f856cafc33a14c7142d49f171e9f4438930a56d7b
SHA512

d7f511d489b2627435ab593545083bed24753baef3ca43e16a83d444f5e281d52f5e7d47204ec51cb2ee183564393dfabf4c9b716ecd2bae11579aa1b36a2bc3
SSDEEP

3072:r52xgKanXD5kGs+CsuGTq8uuSNmHhvEDO+507r2CUaToc9ES/bQnzn2qZzdxLb6H:4xglXD52+q8VSqztUkoc9tsznd7LWT

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  0c57cba31bd9c3703f929e9f856cafc33a14c7142d49f171e9f4438930a56d7b
- Size
  
  259KB
- MD5
  
  6b95f92d87e9eebacab03cc523d8733f
- SHA1
  
  d2ceb1939fd73e13d83ab98673f6c571560c9e63
- SHA256
  
  0c57cba31bd9c3703f929e9f856cafc33a14c7142d49f171e9f4438930a56d7b
- SHA512
  
  d7f511d489b2627435ab593545083bed24753baef3ca43e16a83d444f5e281d52f5e7d47204ec51cb2ee183564393dfabf4c9b716ecd2bae11579aa1b36a2bc3
- SSDEEP
  
  3072:r52xgKanXD5kGs+CsuGTq8uuSNmHhvEDO+507r2CUaToc9ES/bQnzn2qZzdxLb6H:4xglXD52+q8VSqztUkoc9tsznd7LWT
Score

10^/10

smokeloader pub2 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoortrojan