smokeloader | 8520127f770be7a9145f4273263fb99551255726941c123759fdc63c1854cfcb | Triage

Sharing

General

Target

8520127f770be7a9145f4273263fb99551255726941c123759fdc63c1854cfcb
Size

323KB
Sample

240625-aahlnaseqm
MD5

44cbad1fee922fd62b233346bbac6087
SHA1

ec38a7803ae0cf6f39870be9fd234f3ffef55987
SHA256

8520127f770be7a9145f4273263fb99551255726941c123759fdc63c1854cfcb
SHA512

592e59c1c0056f848b13640b006c4d76bbcbea39c4dbcb585d21a47c8d7430d55a985bd5da95d721a730ef2e1622224344b50a97746817963cf2f8ab6bd690f9
SSDEEP

3072:mEJqLYMFv79K0UXUjusUqOdN/EOC8P05XIzPrhY7iiMVi7u:mEILYMp7w38urqAsOC8eIz1Y7ihVi

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  8520127f770be7a9145f4273263fb99551255726941c123759fdc63c1854cfcb
- Size
  
  323KB
- MD5
  
  44cbad1fee922fd62b233346bbac6087
- SHA1
  
  ec38a7803ae0cf6f39870be9fd234f3ffef55987
- SHA256
  
  8520127f770be7a9145f4273263fb99551255726941c123759fdc63c1854cfcb
- SHA512
  
  592e59c1c0056f848b13640b006c4d76bbcbea39c4dbcb585d21a47c8d7430d55a985bd5da95d721a730ef2e1622224344b50a97746817963cf2f8ab6bd690f9
- SSDEEP
  
  3072:mEJqLYMFv79K0UXUjusUqOdN/EOC8P05XIzPrhY7iiMVi7u:mEILYMp7w38urqAsOC8eIz1Y7ihVi
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan