smokeloader | 0811449e8fe78213f52e656b7e2a926a0da64ad149a3e522aea10487c087ceb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c740538ca10ba42055698e0cc16a0c72.exe
Size

165KB
Sample

240711-t78nwsveqm
MD5

c740538ca10ba42055698e0cc16a0c72
SHA1

bcbda4aa480d535d32fdf805dd1b7dd293194794
SHA256

0811449e8fe78213f52e656b7e2a926a0da64ad149a3e522aea10487c087ceb8
SHA512

40231933d41214e1ad50c193b091d26cf8f3dc9d92d1cb24428a8947ec5fa98b6c6129040daf6fb7b761f260386b2197f40e83044abdb82b567ed242a1f98606
SSDEEP

3072:uLmoL8T5rQILHZL6VcfueyNehz564AfhX2sKvq91lFIi:JoL8T2OH16VeycC40Ki91

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  c740538ca10ba42055698e0cc16a0c72.exe
- Size
  
  165KB
- MD5
  
  c740538ca10ba42055698e0cc16a0c72
- SHA1
  
  bcbda4aa480d535d32fdf805dd1b7dd293194794
- SHA256
  
  0811449e8fe78213f52e656b7e2a926a0da64ad149a3e522aea10487c087ceb8
- SHA512
  
  40231933d41214e1ad50c193b091d26cf8f3dc9d92d1cb24428a8947ec5fa98b6c6129040daf6fb7b761f260386b2197f40e83044abdb82b567ed242a1f98606
- SSDEEP
  
  3072:uLmoL8T5rQILHZL6VcfueyNehz564AfhX2sKvq91lFIi:JoL8T2OH16VeycC40Ki91
Score

10^/10

smokeloader pub1 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoortrojan