smokeloader | d9f94c5aae1475216623c8458cbf9ad26a58fd61c12fe25836acfd1b8ee86321 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f1c55e2da9222a2e994c3caa7c1d690N.exe
Size

240KB
Sample

240726-b76kesydrn
MD5

4f1c55e2da9222a2e994c3caa7c1d690
SHA1

e16a833b721a1b0565684f3b4a516737b851e7b9
SHA256

d9f94c5aae1475216623c8458cbf9ad26a58fd61c12fe25836acfd1b8ee86321
SHA512

0e095904c09661a7ef78e231de5963ece6443459270ccb30184022606d931ba2d08a89b55af47ee66cb04b0e3733cec470594f149d1bec7b92b45134e0a99d9b
SSDEEP

3072:44/TQsx4c5+5ezyy7rv+0cNOuy+vhbc4tj7UKP+bEugNQ90K:44XxD0oy8rTcN3JouJ

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  4f1c55e2da9222a2e994c3caa7c1d690N.exe
- Size
  
  240KB
- MD5
  
  4f1c55e2da9222a2e994c3caa7c1d690
- SHA1
  
  e16a833b721a1b0565684f3b4a516737b851e7b9
- SHA256
  
  d9f94c5aae1475216623c8458cbf9ad26a58fd61c12fe25836acfd1b8ee86321
- SHA512
  
  0e095904c09661a7ef78e231de5963ece6443459270ccb30184022606d931ba2d08a89b55af47ee66cb04b0e3733cec470594f149d1bec7b92b45134e0a99d9b
- SSDEEP
  
  3072:44/TQsx4c5+5ezyy7rv+0cNOuy+vhbc4tj7UKP+bEugNQ90K:44XxD0oy8rTcN3JouJ
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan