smokeloader | eefca094e56b83aa86b3dfc14ad342217b861ebdde3a2e3083e03d7983a1f10f | Triage

Sharing

General

Target

eefca094e56b83aa86b3dfc14ad342217b861ebdde3a2e3083e03d7983a1f10f
Size

317KB
Sample

240528-l4le7afa4y
MD5

bc715b4c16c52e05d92d7aa642d2a16d
SHA1

5b9438c9e433cc5b9e7ad99a0bdabfc05a086232
SHA256

eefca094e56b83aa86b3dfc14ad342217b861ebdde3a2e3083e03d7983a1f10f
SHA512

2abf8c0a33a3f04e747b9570630f3ad744aaf7606d7f3afb6fc2a614e071f888c9b8ef3f5a5f7fe92d0ae68d66834311fc9bfd3f5cfb58bc4802416c6f9d3014
SSDEEP

6144:4M5PjqTOjFczMK1TLxGx2dCwszEbD4bO7LTlcM4vd:4M5GTOj+zMWxtdCwszyzVcM41

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  eefca094e56b83aa86b3dfc14ad342217b861ebdde3a2e3083e03d7983a1f10f
- Size
  
  317KB
- MD5
  
  bc715b4c16c52e05d92d7aa642d2a16d
- SHA1
  
  5b9438c9e433cc5b9e7ad99a0bdabfc05a086232
- SHA256
  
  eefca094e56b83aa86b3dfc14ad342217b861ebdde3a2e3083e03d7983a1f10f
- SHA512
  
  2abf8c0a33a3f04e747b9570630f3ad744aaf7606d7f3afb6fc2a614e071f888c9b8ef3f5a5f7fe92d0ae68d66834311fc9bfd3f5cfb58bc4802416c6f9d3014
- SSDEEP
  
  6144:4M5PjqTOjFczMK1TLxGx2dCwszEbD4bO7LTlcM4vd:4M5GTOj+zMWxtdCwszyzVcM41
Score

10^/10

smokeloader pub3 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoortrojan