smokeloader | 496f578f68fcef476f7c8d92322a3536f507e45704b8e1c87c56056e19c1e391 | Triage

Sharing

General

Target

496f578f68fcef476f7c8d92322a3536f507e45704b8e1c87c56056e19c1e391
Size

227KB
Sample

240624-l9zvrszhql
MD5

4c2fac8f9227cdb10b5b8056f396629b
SHA1

3e84121bee19dd64d74ef41196a09894a6017d73
SHA256

496f578f68fcef476f7c8d92322a3536f507e45704b8e1c87c56056e19c1e391
SHA512

10297336f66bb57fd6d1d8a563dd507d05b79d63cec50e3069593055b1b21f41c8de10284f7d6d2ece981e68bd3970252f3e7700d0fa3f602867f5f5b95ed3b6
SSDEEP

3072:1Jr6zgrn0rzKl3g5hxsrtYvyjIo3T8NAf68hu0nPsZciXcYW43hK:1hnezKl3UstVIo3T8ONhZPKVs

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  496f578f68fcef476f7c8d92322a3536f507e45704b8e1c87c56056e19c1e391
- Size
  
  227KB
- MD5
  
  4c2fac8f9227cdb10b5b8056f396629b
- SHA1
  
  3e84121bee19dd64d74ef41196a09894a6017d73
- SHA256
  
  496f578f68fcef476f7c8d92322a3536f507e45704b8e1c87c56056e19c1e391
- SHA512
  
  10297336f66bb57fd6d1d8a563dd507d05b79d63cec50e3069593055b1b21f41c8de10284f7d6d2ece981e68bd3970252f3e7700d0fa3f602867f5f5b95ed3b6
- SSDEEP
  
  3072:1Jr6zgrn0rzKl3g5hxsrtYvyjIo3T8NAf68hu0nPsZciXcYW43hK:1hnezKl3UstVIo3T8ONhZPKVs
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan