smokeloader

Resubmissions

25/07/2024, 17:18

240725-vvhsdaxama10

25/07/2024, 16:55

240725-vfas8aseml10

Sharing

Copy URL Twitter E-mail

General

Target
76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3
Size 327KB
Sample240725-vfas8aseml
SHA256 76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3
MD5 e6db9b74f8f010ecb5efc6be90b47d46
SHA1 4f8a35f9df58e38e92492e75ee28eb748f1501b8
SHA512 25c8056d186f5b9090f2c2e4a4e33c503a36a0a63b9884967cb80d233a1f93d5794c246d4ba2bb3c7bc2bb296fab0897e755e41e61d8a591a42830616e2faf50
SSDEEP 3072:ph7mUmxKTmwPKeIjR930t4CfPrvXKIJiekdsCT1:XiUmxKTmNemR930LHTXDi7nT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3
- Size 327KB
- SHA256 76a0620373c5c5378390bfacc4f3a04e31b84a033bd9b551060269c286295aa3
- MD5 e6db9b74f8f010ecb5efc6be90b47d46
- SHA1 4f8a35f9df58e38e92492e75ee28eb748f1501b8
- SHA512 25c8056d186f5b9090f2c2e4a4e33c503a36a0a63b9884967cb80d233a1f93d5794c246d4ba2bb3c7bc2bb296fab0897e755e41e61d8a591a42830616e2faf50
- SSDEEP 3072:ph7mUmxKTmwPKeIjR930t4CfPrvXKIJiekdsCT1:XiUmxKTmNemR930LHTXDi7nT
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader pub1 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks