smokeloader | 873c625efc1abdc5fa0088cd6d6c53fcbe6063d5905debe6ffe0a38454152e5f | Triage

Sharing

General

Target

873c625efc1abdc5fa0088cd6d6c53fcbe6063d5905debe6ffe0a38454152e5f
Size

223KB
Sample

240703-w3hb9asaqq
MD5

c9a827ecf89a149b713d45bb987535b5
SHA1

31175f73a3436054d014caf7b0fe21a762be3bc6
SHA256

873c625efc1abdc5fa0088cd6d6c53fcbe6063d5905debe6ffe0a38454152e5f
SHA512

6ccb8e25b2340dc8eb01d782aeae775becfcbe06963872852dad03699e5cff10ea96f1029687931cb7faee711656cdb024fa383c3950e4fd4408a8f2096f616c
SSDEEP

6144:zZkMqpmq/Tm++CDqCkGL8sHh9YhADfYK1D:zZkMCmq/l+CeQL8sHhG2zP

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  873c625efc1abdc5fa0088cd6d6c53fcbe6063d5905debe6ffe0a38454152e5f
- Size
  
  223KB
- MD5
  
  c9a827ecf89a149b713d45bb987535b5
- SHA1
  
  31175f73a3436054d014caf7b0fe21a762be3bc6
- SHA256
  
  873c625efc1abdc5fa0088cd6d6c53fcbe6063d5905debe6ffe0a38454152e5f
- SHA512
  
  6ccb8e25b2340dc8eb01d782aeae775becfcbe06963872852dad03699e5cff10ea96f1029687931cb7faee711656cdb024fa383c3950e4fd4408a8f2096f616c
- SSDEEP
  
  6144:zZkMqpmq/Tm++CDqCkGL8sHh9YhADfYK1D:zZkMCmq/l+CeQL8sHhG2zP
Score

10^/10

smokeloader pub2 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoortrojan