smokeloader | 2bbed2dc1d24cc222ea243b5a0c5b651f28a3a722a3a5876fc51b7be65c18b35 | Triage

Sharing

General

Target

7e4904b9178631d4056ca756f5cc1b30N.exe
Size

316KB
Sample

240813-fspqks1blj
MD5

7e4904b9178631d4056ca756f5cc1b30
SHA1

b6aa47f7cd0cdf93546a32f7715904185ec003d5
SHA256

2bbed2dc1d24cc222ea243b5a0c5b651f28a3a722a3a5876fc51b7be65c18b35
SHA512

58a0a6daacf21066d0fb36f9f294fcb4709909821b11c42a9e5cd146d6e1fa6a6ed198c5d08f5ec146618d2eef223baf242c01caba7e0a919f5cf83d55560855
SSDEEP

6144:IrX9q5zh6srTbQOMTZCwQDpFep6I3eBFCT:0tq9hvrTbQOMzQDpFe6I34Q

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  7e4904b9178631d4056ca756f5cc1b30N.exe
- Size
  
  316KB
- MD5
  
  7e4904b9178631d4056ca756f5cc1b30
- SHA1
  
  b6aa47f7cd0cdf93546a32f7715904185ec003d5
- SHA256
  
  2bbed2dc1d24cc222ea243b5a0c5b651f28a3a722a3a5876fc51b7be65c18b35
- SHA512
  
  58a0a6daacf21066d0fb36f9f294fcb4709909821b11c42a9e5cd146d6e1fa6a6ed198c5d08f5ec146618d2eef223baf242c01caba7e0a919f5cf83d55560855
- SSDEEP
  
  6144:IrX9q5zh6srTbQOMTZCwQDpFep6I3eBFCT:0tq9hvrTbQOMzQDpFe6I34Q
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan