smokeloader | 25b88bdfb885767a118e031a1f8e3be351006da22d96ac4894c553390fefd092 | Triage

Sharing

General

Target

25b88bdfb885767a118e031a1f8e3be351006da22d96ac4894c553390fefd092
Size

37KB
Sample

240801-1cnhsswhpn
MD5

51aa45c5158e3845b97c346c9da0e3f3
SHA1

3609026eb95e2b9eb890c126f88ab229a98ba93b
SHA256

25b88bdfb885767a118e031a1f8e3be351006da22d96ac4894c553390fefd092
SHA512

d001de97bedbf0096256d063b286ac1c1c678f67c5823935c4429ac2446decbc49a58c3f22ac847623edc08fdc6e155df987891222c2911d587884c81e17b6e2
SSDEEP

768:CazBIa4ueiy5prhFvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWrqSiN2lz/e7kcueKZN

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  25b88bdfb885767a118e031a1f8e3be351006da22d96ac4894c553390fefd092
- Size
  
  37KB
- MD5
  
  51aa45c5158e3845b97c346c9da0e3f3
- SHA1
  
  3609026eb95e2b9eb890c126f88ab229a98ba93b
- SHA256
  
  25b88bdfb885767a118e031a1f8e3be351006da22d96ac4894c553390fefd092
- SHA512
  
  d001de97bedbf0096256d063b286ac1c1c678f67c5823935c4429ac2446decbc49a58c3f22ac847623edc08fdc6e155df987891222c2911d587884c81e17b6e2
- SSDEEP
  
  768:CazBIa4ueiy5prhFvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWrqSiN2lz/e7kcueKZN
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan