smokeloader | 77ba6812b4e9223398d31476512a19ce12c60cf8c9d139e4578f3f19563e0d52 | Triage

Sharing

General

Target

77ba6812b4e9223398d31476512a19ce12c60cf8c9d139e4578f3f19563e0d52
Size

230KB
Sample

240711-2h4bwazcla
MD5

0fc784b6c538e7c4a5a4f4bcd8068859
SHA1

8340c0914ec651c3e4ffc7682162154505fc5f8a
SHA256

77ba6812b4e9223398d31476512a19ce12c60cf8c9d139e4578f3f19563e0d52
SHA512

eaeaf7633b5acc64d95d2691ef0952ea691634591dfe30e61ca2116268f007ef676507a5d67acf5265ed8308622915e1704452a59699f4be162ab9d49aa3818c
SSDEEP

3072:IovqqnT/W562w1DOeZPK5gGw++afPQRMZIa/nobS0xmv/0X4KEHsy4iIT:IIqqnC56li/JfPQRmnoro33KEHW

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  77ba6812b4e9223398d31476512a19ce12c60cf8c9d139e4578f3f19563e0d52
- Size
  
  230KB
- MD5
  
  0fc784b6c538e7c4a5a4f4bcd8068859
- SHA1
  
  8340c0914ec651c3e4ffc7682162154505fc5f8a
- SHA256
  
  77ba6812b4e9223398d31476512a19ce12c60cf8c9d139e4578f3f19563e0d52
- SHA512
  
  eaeaf7633b5acc64d95d2691ef0952ea691634591dfe30e61ca2116268f007ef676507a5d67acf5265ed8308622915e1704452a59699f4be162ab9d49aa3818c
- SSDEEP
  
  3072:IovqqnT/W562w1DOeZPK5gGw++afPQRMZIa/nobS0xmv/0X4KEHsy4iIT:IIqqnC56li/JfPQRmnoro33KEHW
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan