smokeloader | 8f56df8f7bb302095392fade5ee1f809f94a43498684746cb21ccc43d629f0c3 | Triage

Sharing

General

Target

8f56df8f7bb302095392fade5ee1f809f94a43498684746cb21ccc43d629f0c3
Size

322KB
Sample

240625-mgbg5sthjc
MD5

277086eac0885cb79d23f5071c6329f7
SHA1

73c684718fa38887937b24f08e5d1954a3a368f8
SHA256

8f56df8f7bb302095392fade5ee1f809f94a43498684746cb21ccc43d629f0c3
SHA512

5f13dd327bd2557d55eb771a1cee2804f7debc5626e5580192819607ad8794cd15b9fe6f818bba590568ef8f7a0b6c4bdd133591db10c03a3638772b0cb4a4b3
SSDEEP

3072:zhgL13mj+fz+R0ZM++emtIN3pcDGNYSm5hPt4LteL1Ek1EJxTEqS:zKLFmjUNMFe9VOp9F8ehNH

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  8f56df8f7bb302095392fade5ee1f809f94a43498684746cb21ccc43d629f0c3
- Size
  
  322KB
- MD5
  
  277086eac0885cb79d23f5071c6329f7
- SHA1
  
  73c684718fa38887937b24f08e5d1954a3a368f8
- SHA256
  
  8f56df8f7bb302095392fade5ee1f809f94a43498684746cb21ccc43d629f0c3
- SHA512
  
  5f13dd327bd2557d55eb771a1cee2804f7debc5626e5580192819607ad8794cd15b9fe6f818bba590568ef8f7a0b6c4bdd133591db10c03a3638772b0cb4a4b3
- SSDEEP
  
  3072:zhgL13mj+fz+R0ZM++emtIN3pcDGNYSm5hPt4LteL1Ek1EJxTEqS:zKLFmjUNMFe9VOp9F8ehNH
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan