smokeloader | b22840a11f48b1aae6f7da15d64b0e0c132ab89ded8de3c29bab62c331b18b7f | Triage

Sharing

General

Target

b22840a11f48b1aae6f7da15d64b0e0c132ab89ded8de3c29bab62c331b18b7f.exe
Size

185KB
Sample

240802-cqewtavcng
MD5

7afc15124310310751fc1c678fc61064
SHA1

e9af11eb013c9cb2cc7117cb78c36eb1537c4c38
SHA256

b22840a11f48b1aae6f7da15d64b0e0c132ab89ded8de3c29bab62c331b18b7f
SHA512

ad922aa853610e340664ed2cd558597c4912970cc0ccdd1d24515a05590e3a1f2df3ead22083a38b047979c7217ef06531b93d231153b3140f65f2582133a419
SSDEEP

1536:dxfp8iZ1Lylay1zWikvTPQjKY04R/15w0Q3+b7X1mo4oKjYl9KcOYlbomJXH5aRj:71LYtk8jRRQW4L49nOmbomJXH5z6

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  b22840a11f48b1aae6f7da15d64b0e0c132ab89ded8de3c29bab62c331b18b7f.exe
- Size
  
  185KB
- MD5
  
  7afc15124310310751fc1c678fc61064
- SHA1
  
  e9af11eb013c9cb2cc7117cb78c36eb1537c4c38
- SHA256
  
  b22840a11f48b1aae6f7da15d64b0e0c132ab89ded8de3c29bab62c331b18b7f
- SHA512
  
  ad922aa853610e340664ed2cd558597c4912970cc0ccdd1d24515a05590e3a1f2df3ead22083a38b047979c7217ef06531b93d231153b3140f65f2582133a419
- SSDEEP
  
  1536:dxfp8iZ1Lylay1zWikvTPQjKY04R/15w0Q3+b7X1mo4oKjYl9KcOYlbomJXH5aRj:71LYtk8jRRQW4L49nOmbomJXH5z6
Score

10^/10

smokeloader pub1 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

smokeloaderpub1backdoordiscoverytrojan