smokeloader | 85fb2a5fc04e93c9bb993e7a776a3345be25f9736e11506f6b66d04525312308 | Triage

Sharing

General

Target

85fb2a5fc04e93c9bb993e7a776a3345be25f9736e11506f6b66d04525312308
Size

316KB
Sample

240528-ljq5yafc65
MD5

eb213b4d899235186b8094242c6cbeb8
SHA1

17354cb779212f54f4dc102f592d80bea94d433d
SHA256

85fb2a5fc04e93c9bb993e7a776a3345be25f9736e11506f6b66d04525312308
SHA512

6ba28ddce8b607d2a51e12a1710a22ff49957921340d627b7cecdb3ce3016ea2bba726ea4b2a7a43291c9aba91d036c07c41cb90973882babaab206e68ab50d7
SSDEEP

6144:qnBgx7IXwXcGdAY4E6PMulje7LTlcM4vd:qnBMIXwMGqYb6PBlmVcM41

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  85fb2a5fc04e93c9bb993e7a776a3345be25f9736e11506f6b66d04525312308
- Size
  
  316KB
- MD5
  
  eb213b4d899235186b8094242c6cbeb8
- SHA1
  
  17354cb779212f54f4dc102f592d80bea94d433d
- SHA256
  
  85fb2a5fc04e93c9bb993e7a776a3345be25f9736e11506f6b66d04525312308
- SHA512
  
  6ba28ddce8b607d2a51e12a1710a22ff49957921340d627b7cecdb3ce3016ea2bba726ea4b2a7a43291c9aba91d036c07c41cb90973882babaab206e68ab50d7
- SSDEEP
  
  6144:qnBgx7IXwXcGdAY4E6PMulje7LTlcM4vd:qnBMIXwMGqYb6PBlmVcM41
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan