smokeloader

Resubmissions

06/07/2024, 15:29

240706-sw8zvasgkl10

06/07/2024, 15:26

240706-st7n1asfjk10

06/07/2024, 12:41

240706-pwtndaycln10

06/07/2024, 04:15

240706-et8dmsvgkq10

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 230KB
Sample240706-et8dmsvgkq
SHA256 77ba6812b4e9223398d31476512a19ce12c60cf8c9d139e4578f3f19563e0d52
MD5 0fc784b6c538e7c4a5a4f4bcd8068859
SHA1 8340c0914ec651c3e4ffc7682162154505fc5f8a
SHA512 eaeaf7633b5acc64d95d2691ef0952ea691634591dfe30e61ca2116268f007ef676507a5d67acf5265ed8308622915e1704452a59699f4be162ab9d49aa3818c
SSDEEP 3072:IovqqnT/W562w1DOeZPK5gGw++afPQRMZIa/nobS0xmv/0X4KEHsy4iIT:IIqqnC56li/JfPQRmnoro33KEHW
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  file.exe
- Size 230KB
- SHA256 77ba6812b4e9223398d31476512a19ce12c60cf8c9d139e4578f3f19563e0d52
- MD5 0fc784b6c538e7c4a5a4f4bcd8068859
- SHA1 8340c0914ec651c3e4ffc7682162154505fc5f8a
- SHA512 eaeaf7633b5acc64d95d2691ef0952ea691634591dfe30e61ca2116268f007ef676507a5d67acf5265ed8308622915e1704452a59699f4be162ab9d49aa3818c
- SSDEEP 3072:IovqqnT/W562w1DOeZPK5gGw++afPQRMZIa/nobS0xmv/0X4KEHsy4iIT:IIqqnC56li/JfPQRmnoro33KEHW
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks