smokeloader | 9bb377949b70c70dc325f9bf4c62bb61b07c284cfa6a5f709c6cae7333c8277f | Triage

Sharing

General

Target

9bb377949b70c70dc325f9bf4c62bb61b07c284cfa6a5f709c6cae7333c8277f
Size

316KB
Sample

240528-vlvetacf5w
MD5

b0aa49b29fac105b7ad8c383bd8276b6
SHA1

a6b86760b5dcab238e59ae7dc41ebdc1a476550d
SHA256

9bb377949b70c70dc325f9bf4c62bb61b07c284cfa6a5f709c6cae7333c8277f
SHA512

9795a1fb87d47756110d671c843a51b00f60f08a1deb7d0755863dc5d0728e323cd50ca9e6729f698ccf5bc5631cf678916c49e315f87bac303ed53f9f57cacd
SSDEEP

6144:wY1jvcyhP7Eis6/qrbyxAtl6B01ZTb+el:wY1jvlP7Zs6/yuaoQZx

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  9bb377949b70c70dc325f9bf4c62bb61b07c284cfa6a5f709c6cae7333c8277f
- Size
  
  316KB
- MD5
  
  b0aa49b29fac105b7ad8c383bd8276b6
- SHA1
  
  a6b86760b5dcab238e59ae7dc41ebdc1a476550d
- SHA256
  
  9bb377949b70c70dc325f9bf4c62bb61b07c284cfa6a5f709c6cae7333c8277f
- SHA512
  
  9795a1fb87d47756110d671c843a51b00f60f08a1deb7d0755863dc5d0728e323cd50ca9e6729f698ccf5bc5631cf678916c49e315f87bac303ed53f9f57cacd
- SSDEEP
  
  6144:wY1jvcyhP7Eis6/qrbyxAtl6B01ZTb+el:wY1jvlP7Zs6/yuaoQZx
Score

10^/10

smokeloader pub4 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoortrojan