smokeloader | c74d87eb8e2de5493d8e950b8fcf51b2d89d88c7e5b77a9dc480e8dd77ac15a4 | Triage

Sharing

General

Target

c74d87eb8e2de5493d8e950b8fcf51b2d89d88c7e5b77a9dc480e8dd77ac15a4
Size

219KB
Sample

240708-eqv9xatfkh
MD5

9448faa05098532aa47f8c55ed979586
SHA1

0039a2a94cfd105b7b3ac3f174931bb0cf3153f8
SHA256

c74d87eb8e2de5493d8e950b8fcf51b2d89d88c7e5b77a9dc480e8dd77ac15a4
SHA512

19b4790b9c6bbf09de4f80f368527c7eb6a0a65f1a1d0e6fb277a8f44048d05415f680fe60b144bdaddcbc09ed6fea6eea2f05edd69b654167e09e6bbba5b556
SSDEEP

3072:p8FfXDCLGhRZ9sZexhfXd+jYzoH8X0fLXSAHUbGlmsy4iIc:yFfTCiX0AUYAsS2AHlmW

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  c74d87eb8e2de5493d8e950b8fcf51b2d89d88c7e5b77a9dc480e8dd77ac15a4
- Size
  
  219KB
- MD5
  
  9448faa05098532aa47f8c55ed979586
- SHA1
  
  0039a2a94cfd105b7b3ac3f174931bb0cf3153f8
- SHA256
  
  c74d87eb8e2de5493d8e950b8fcf51b2d89d88c7e5b77a9dc480e8dd77ac15a4
- SHA512
  
  19b4790b9c6bbf09de4f80f368527c7eb6a0a65f1a1d0e6fb277a8f44048d05415f680fe60b144bdaddcbc09ed6fea6eea2f05edd69b654167e09e6bbba5b556
- SSDEEP
  
  3072:p8FfXDCLGhRZ9sZexhfXd+jYzoH8X0fLXSAHUbGlmsy4iIc:yFfTCiX0AUYAsS2AHlmW
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan