smokeloader | 28693f1f77415f89bf72dd7e8f6394ff8fbdd97830b3c7e8fd1e0459599853d3 | Triage

Sharing

General

Target

f9bc58ad1d4718d602a2d47d1fa75230N.exe
Size

408KB
Sample

240813-2dv5psthpl
MD5

f9bc58ad1d4718d602a2d47d1fa75230
SHA1

efa48154d1a2f54d10e38fbff28421f05d9b4fab
SHA256

28693f1f77415f89bf72dd7e8f6394ff8fbdd97830b3c7e8fd1e0459599853d3
SHA512

b71047eda5fbc8f5257bfd06c08fad60a7ee50d6a5d803fbb1b57cb5daad2f3c119434ee3deb54f2941d79808ff49c7afdcefaec68ca81cec11b7581d59f6c04
SSDEEP

6144:R1pxnj5q0rAdQjnbbrGhgMOGjCMo/lwzXGRXaqMaMVX6QLNTj:R1pxjNrAdybbrXLr2zXGBRMJdj

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  f9bc58ad1d4718d602a2d47d1fa75230N.exe
- Size
  
  408KB
- MD5
  
  f9bc58ad1d4718d602a2d47d1fa75230
- SHA1
  
  efa48154d1a2f54d10e38fbff28421f05d9b4fab
- SHA256
  
  28693f1f77415f89bf72dd7e8f6394ff8fbdd97830b3c7e8fd1e0459599853d3
- SHA512
  
  b71047eda5fbc8f5257bfd06c08fad60a7ee50d6a5d803fbb1b57cb5daad2f3c119434ee3deb54f2941d79808ff49c7afdcefaec68ca81cec11b7581d59f6c04
- SSDEEP
  
  6144:R1pxnj5q0rAdQjnbbrGhgMOGjCMo/lwzXGRXaqMaMVX6QLNTj:R1pxjNrAdybbrXLr2zXGBRMJdj
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan