smokeloader | f902d64df35b5d6801ea86c3534d09e5e42380dfe87e0cd9cd426d9fddd984d9 | Triage

Sharing

General

Target

f902d64df35b5d6801ea86c3534d09e5e42380dfe87e0cd9cd426d9fddd984d9
Size

312KB
Sample

240624-fgzfms1clr
MD5

ad5e819d3376d673d664f2e21057cbef
SHA1

63c1d2aab8b2d703eb717be7a49522894570f261
SHA256

f902d64df35b5d6801ea86c3534d09e5e42380dfe87e0cd9cd426d9fddd984d9
SHA512

6351dbd3cd3bc2f7c796ea29f9390af99c23c24125d9fea4b24d16df9c28735262967f829370c92b938f932b2d96875e9cc9b1348804c94caf22c4c4841b44b9
SSDEEP

3072:2wxeLXmkqjN1S7rIHiuqlMTUNrhD6DXwzq+5P90E6EuGP:2wML2kq5e1ZpnD6zwzqI9XZ

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  f902d64df35b5d6801ea86c3534d09e5e42380dfe87e0cd9cd426d9fddd984d9
- Size
  
  312KB
- MD5
  
  ad5e819d3376d673d664f2e21057cbef
- SHA1
  
  63c1d2aab8b2d703eb717be7a49522894570f261
- SHA256
  
  f902d64df35b5d6801ea86c3534d09e5e42380dfe87e0cd9cd426d9fddd984d9
- SHA512
  
  6351dbd3cd3bc2f7c796ea29f9390af99c23c24125d9fea4b24d16df9c28735262967f829370c92b938f932b2d96875e9cc9b1348804c94caf22c4c4841b44b9
- SSDEEP
  
  3072:2wxeLXmkqjN1S7rIHiuqlMTUNrhD6DXwzq+5P90E6EuGP:2wML2kq5e1ZpnD6zwzqI9XZ
Score

10^/10

smokeloader pub2 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoortrojan