smokeloader | 111c86b2562c801e94191e330c263eb0d43e6d47d0b714ecab4280d588add894 | Triage

Sharing

General

Target

1e0e4788f512a69fc87aac99112d6ea0N.exe
Size

415KB
Sample

240814-yrgyfswemn
MD5

1e0e4788f512a69fc87aac99112d6ea0
SHA1

ae7f90faf7c70aeea604877bf281969e6609574e
SHA256

111c86b2562c801e94191e330c263eb0d43e6d47d0b714ecab4280d588add894
SHA512

e707031ee2c7e4f2de9a8c519e2060b3028819b7bcf3f634c99a4486d50913106d6a8c46ca8a4ee3716034715460dee05041c07e2002ab915628e4c5f89e846a
SSDEEP

6144:1Nuh5OQ/NcedDDGllvv7buQ45m+P1jM+yBc5at96Nkmu3/EHIT:1NkkQ/Nx3iNv7bytapCoPE4

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  1e0e4788f512a69fc87aac99112d6ea0N.exe
- Size
  
  415KB
- MD5
  
  1e0e4788f512a69fc87aac99112d6ea0
- SHA1
  
  ae7f90faf7c70aeea604877bf281969e6609574e
- SHA256
  
  111c86b2562c801e94191e330c263eb0d43e6d47d0b714ecab4280d588add894
- SHA512
  
  e707031ee2c7e4f2de9a8c519e2060b3028819b7bcf3f634c99a4486d50913106d6a8c46ca8a4ee3716034715460dee05041c07e2002ab915628e4c5f89e846a
- SSDEEP
  
  6144:1Nuh5OQ/NcedDDGllvv7buQ45m+P1jM+yBc5at96Nkmu3/EHIT:1NkkQ/Nx3iNv7bytapCoPE4
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan