smokeloader | 26c54892680041a57956938e8c25981c808f2ec1dd947b5db3b9da4162cfdef9 | Triage

Sharing

General

Target

file.exe
Size

244KB
Sample

240727-p3gx6azfrk
MD5

0290bde72b9f8d6f9b1efda467db3a91
SHA1

14d50efef82842167fd114fa3325fb3f9e887309
SHA256

26c54892680041a57956938e8c25981c808f2ec1dd947b5db3b9da4162cfdef9
SHA512

aa314d1bb7830bea1c2e5592aba36c01b2d29791dd153d4236ad6b643d92d58e0d941429f5477808f8097d367da33929ba65486f62ad6902d51af7336953aa68
SSDEEP

3072:6DOCjVOtPZXeF+SOSNj/qw7OybwdOKgZn6rTzp2d8n/Xyor:spjVOtPZXeF+SOcj/qj4wdyZn6rPpxf

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  file.exe
- Size
  
  244KB
- MD5
  
  0290bde72b9f8d6f9b1efda467db3a91
- SHA1
  
  14d50efef82842167fd114fa3325fb3f9e887309
- SHA256
  
  26c54892680041a57956938e8c25981c808f2ec1dd947b5db3b9da4162cfdef9
- SHA512
  
  aa314d1bb7830bea1c2e5592aba36c01b2d29791dd153d4236ad6b643d92d58e0d941429f5477808f8097d367da33929ba65486f62ad6902d51af7336953aa68
- SSDEEP
  
  3072:6DOCjVOtPZXeF+SOSNj/qw7OybwdOKgZn6rTzp2d8n/Xyor:spjVOtPZXeF+SOcj/qj4wdyZn6rPpxf
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan