smokeloader | 83ca97731e4ca79ec7932e64a09ae0ec64e3585fc049ec35c5d8cd84b69d2379 | Triage

Sharing

General

Target

83ca97731e4ca79ec7932e64a09ae0ec64e3585fc049ec35c5d8cd84b69d2379
Size

309KB
Sample

240624-3sdpmssaqq
MD5

8978e47f10f5ab97ff28fa703a94f4e0
SHA1

0c3c60db73290c06acdce42460feaa9ca6c608e9
SHA256

83ca97731e4ca79ec7932e64a09ae0ec64e3585fc049ec35c5d8cd84b69d2379
SHA512

207a48293ab3fb7bbbdd292f2994fdbf5d4ed5cdeb3e880c0ef9911a5571daa50111c3a1744525a06e4a5c10146d6beebd8531138461f5f004df7400efbfba46
SSDEEP

3072:WT3wPZLVVD7IpSmuJAIKo3ZFGtzgOxPfgG50YEzPrhY7iiCEDJi7u:WT3wxLTD8FuJfxpZfRz1Y7izOJi

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  83ca97731e4ca79ec7932e64a09ae0ec64e3585fc049ec35c5d8cd84b69d2379
- Size
  
  309KB
- MD5
  
  8978e47f10f5ab97ff28fa703a94f4e0
- SHA1
  
  0c3c60db73290c06acdce42460feaa9ca6c608e9
- SHA256
  
  83ca97731e4ca79ec7932e64a09ae0ec64e3585fc049ec35c5d8cd84b69d2379
- SHA512
  
  207a48293ab3fb7bbbdd292f2994fdbf5d4ed5cdeb3e880c0ef9911a5571daa50111c3a1744525a06e4a5c10146d6beebd8531138461f5f004df7400efbfba46
- SSDEEP
  
  3072:WT3wPZLVVD7IpSmuJAIKo3ZFGtzgOxPfgG50YEzPrhY7iiCEDJi7u:WT3wxLTD8FuJfxpZfRz1Y7izOJi
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan