smokeloader | 96d0222d9f87671195efa58c378014ba84aa6b486dacc051c0c3f9680840448e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96d0222d9f87671195efa58c378014ba84aa6b486dacc051c0c3f9680840448e
Size

409KB
Sample

240811-j7klyswbrg
MD5

5ce33c7a9faba92f465355cdd984b5ac
SHA1

23e6c9529800cffb38288f55ca2accb369b3d6b5
SHA256

96d0222d9f87671195efa58c378014ba84aa6b486dacc051c0c3f9680840448e
SHA512

8ecc96f9bf5dad641d0bbc17c57f8fcea0a4fae7eb61c1ff03dfcb04a882dde285da47a7d912ad8ae9d8e4fb959bc7060d7ead21eef3a5315666e03e557eaff1
SSDEEP

6144:vM2uo5ldguvsdx9V2Md7DaiEhgPQ2LrFu6b+QqPHVCZiGj8gJIFbD4QqoYFEH:vM2VDdguYYK4gPbg6HqPfTgJIJDgE

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  96d0222d9f87671195efa58c378014ba84aa6b486dacc051c0c3f9680840448e
- Size
  
  409KB
- MD5
  
  5ce33c7a9faba92f465355cdd984b5ac
- SHA1
  
  23e6c9529800cffb38288f55ca2accb369b3d6b5
- SHA256
  
  96d0222d9f87671195efa58c378014ba84aa6b486dacc051c0c3f9680840448e
- SHA512
  
  8ecc96f9bf5dad641d0bbc17c57f8fcea0a4fae7eb61c1ff03dfcb04a882dde285da47a7d912ad8ae9d8e4fb959bc7060d7ead21eef3a5315666e03e557eaff1
- SSDEEP
  
  6144:vM2uo5ldguvsdx9V2Md7DaiEhgPQ2LrFu6b+QqPHVCZiGj8gJIFbD4QqoYFEH:vM2VDdguYYK4gPbg6HqPfTgJIJDgE
Score

10^/10

smokeloader pub1 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoordiscoverytrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan