smokeloader | 63f652c02f65b2bbd6b5a43d9428d9c37a882c777721944d1d0da242671d8984 | Triage

Sharing

General

Target

63f652c02f65b2bbd6b5a43d9428d9c37a882c777721944d1d0da242671d8984
Size

214KB
Sample

240814-jysafawekl
MD5

84aedba92adb38ffb8251589a24b8aea
SHA1

060cff4d527e865794ee85b40221804ff1bc9e22
SHA256

63f652c02f65b2bbd6b5a43d9428d9c37a882c777721944d1d0da242671d8984
SHA512

ff2cd1599538f77f10275a6daa0abc2dcd333bd2de71467a3e5f984cd9e39cc87743e2090252091ca31c42ab8dbb59ab74b3864922a698ef1bf498fc52ef80e1
SSDEEP

3072:x2GyEKmNdfY5TvA6AIWDv4xKS+8g5+xrD:lDYG6nWDvOdxr

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  63f652c02f65b2bbd6b5a43d9428d9c37a882c777721944d1d0da242671d8984
- Size
  
  214KB
- MD5
  
  84aedba92adb38ffb8251589a24b8aea
- SHA1
  
  060cff4d527e865794ee85b40221804ff1bc9e22
- SHA256
  
  63f652c02f65b2bbd6b5a43d9428d9c37a882c777721944d1d0da242671d8984
- SHA512
  
  ff2cd1599538f77f10275a6daa0abc2dcd333bd2de71467a3e5f984cd9e39cc87743e2090252091ca31c42ab8dbb59ab74b3864922a698ef1bf498fc52ef80e1
- SSDEEP
  
  3072:x2GyEKmNdfY5TvA6AIWDv4xKS+8g5+xrD:lDYG6nWDvOdxr
Score

10^/10

smokeloader pub1 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoordiscoverytrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan