smokeloader | f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef | Triage

Sharing

General

Target

f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef
Size

277KB
Sample

240627-yzvvaa1bmq
MD5

76b1ec59ae9a482c80e7675eda6223f4
SHA1

dbc82e21a2c2465d7789fb52068809cbf9fd9046
SHA256

f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef
SHA512

8c90574bf9daa49819033ba66716316a47392192e1976dd6f7be675b32befbebc5a651d45bd7356dd0f79a3f5a359bc75fcc91849a29c8b67716ba07d0893948
SSDEEP

3072:YKDLoC809RlGIwMI7VlOtm+OxD755cJ1+ZtQXG4LYXvH5ddkxrj:YOLoC8Qa7VlOtmZ8uZtQOXvsrj

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef
- Size
  
  277KB
- MD5
  
  76b1ec59ae9a482c80e7675eda6223f4
- SHA1
  
  dbc82e21a2c2465d7789fb52068809cbf9fd9046
- SHA256
  
  f90cea24860958c854d0c23e2ed212d3f3a5a0153de6fd5a1787e8bd43d450ef
- SHA512
  
  8c90574bf9daa49819033ba66716316a47392192e1976dd6f7be675b32befbebc5a651d45bd7356dd0f79a3f5a359bc75fcc91849a29c8b67716ba07d0893948
- SSDEEP
  
  3072:YKDLoC809RlGIwMI7VlOtm+OxD755cJ1+ZtQXG4LYXvH5ddkxrj:YOLoC8Qa7VlOtmZ8uZtQOXvsrj
Score

10^/10

smokeloader pub2 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoortrojan