smokeloader | e9ddd60081c3e01d049dc4d5ed5f150afc27ffbbdb8b6adf558fa677ad8875dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ddd60081c3e01d049dc4d5ed5f150afc27ffbbdb8b6adf558fa677ad8875dd
Size

228KB
Sample

240727-a58fkawaqk
MD5

94267a284d656590e74246749da7f91c
SHA1

bccb3bd1483e50641862412e152dc5c7b590f4e8
SHA256

e9ddd60081c3e01d049dc4d5ed5f150afc27ffbbdb8b6adf558fa677ad8875dd
SHA512

6b951b4d78b0116fa6c0e529bd952c078e07868d74dc260449ea139effd3c180167f2dfc6fe2467718af3a88dc706ec7123e58b3c9bc310dbd7e1a9c77df606b
SSDEEP

3072:fCVuay93ubZTcCMPK/cvWIs54Xg3WKSRCyRsEhN4qQzPMVL:6cay93GZIK/g9vRCyaGCVz

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  e9ddd60081c3e01d049dc4d5ed5f150afc27ffbbdb8b6adf558fa677ad8875dd
- Size
  
  228KB
- MD5
  
  94267a284d656590e74246749da7f91c
- SHA1
  
  bccb3bd1483e50641862412e152dc5c7b590f4e8
- SHA256
  
  e9ddd60081c3e01d049dc4d5ed5f150afc27ffbbdb8b6adf558fa677ad8875dd
- SHA512
  
  6b951b4d78b0116fa6c0e529bd952c078e07868d74dc260449ea139effd3c180167f2dfc6fe2467718af3a88dc706ec7123e58b3c9bc310dbd7e1a9c77df606b
- SSDEEP
  
  3072:fCVuay93ubZTcCMPK/cvWIs54Xg3WKSRCyRsEhN4qQzPMVL:6cay93GZIK/g9vRCyaGCVz
Score

10^/10

smokeloader pub2 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoordiscoverytrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan