smokeloader | 0fa34507e4989e8a96cea715d3418f343bc35cbb256d63da1a87ea82de59c350 | Triage

Sharing

General

Target

file.exe
Size

313KB
Sample

240710-e1z1vaycpg
MD5

901de7cb6103de0abf3d549ce4e89abf
SHA1

b1475c244d289967a7274770fc0986105ffccc21
SHA256

0fa34507e4989e8a96cea715d3418f343bc35cbb256d63da1a87ea82de59c350
SHA512

526bf8b79645f4abe98d9e7c9c1fe26aa1a1e69aef5e1567bf081cd0920572de7115232cfd456042cb165b44e86608d1a6959a6f7f5dc2c92cd04f8f6a3ddc0e
SSDEEP

3072:i/HcVeYlfwazMo4z8sP2s2swvoLhkHiVpxf7HV1Umwp8JdM:ocHJkasRhHxHV1UJp8TM

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  file.exe
- Size
  
  313KB
- MD5
  
  901de7cb6103de0abf3d549ce4e89abf
- SHA1
  
  b1475c244d289967a7274770fc0986105ffccc21
- SHA256
  
  0fa34507e4989e8a96cea715d3418f343bc35cbb256d63da1a87ea82de59c350
- SHA512
  
  526bf8b79645f4abe98d9e7c9c1fe26aa1a1e69aef5e1567bf081cd0920572de7115232cfd456042cb165b44e86608d1a6959a6f7f5dc2c92cd04f8f6a3ddc0e
- SSDEEP
  
  3072:i/HcVeYlfwazMo4z8sP2s2swvoLhkHiVpxf7HV1Umwp8JdM:ocHJkasRhHxHV1UJp8TM
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan