smokeloader | fb20b2f013f67c9b0833a8d895e189ae6d14c876edfc062e8f6beb288af7ad4c | Triage

Sharing

General

Target

91c5be16a0920806b156dc117ff06960N.exe
Size

421KB
Sample

240818-d7hjpstbmd
MD5

91c5be16a0920806b156dc117ff06960
SHA1

8e8abe418e07d9b706f2a9b51eb38f77c4724acd
SHA256

fb20b2f013f67c9b0833a8d895e189ae6d14c876edfc062e8f6beb288af7ad4c
SHA512

50d3df6b473cbb839e81eee2ae576c2fed868304bc2e415543c5a1b71a60cc4ca556e52988eff2679e057525e42ded7e5ad83ab07aece54b13d4e36e541e3625
SSDEEP

6144:clitdKHANjXlLaFjurn2asLaPjul1NWeSUdFysXUST:cItdKHANjXqapsL4juRNSUC0

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  91c5be16a0920806b156dc117ff06960N.exe
- Size
  
  421KB
- MD5
  
  91c5be16a0920806b156dc117ff06960
- SHA1
  
  8e8abe418e07d9b706f2a9b51eb38f77c4724acd
- SHA256
  
  fb20b2f013f67c9b0833a8d895e189ae6d14c876edfc062e8f6beb288af7ad4c
- SHA512
  
  50d3df6b473cbb839e81eee2ae576c2fed868304bc2e415543c5a1b71a60cc4ca556e52988eff2679e057525e42ded7e5ad83ab07aece54b13d4e36e541e3625
- SSDEEP
  
  6144:clitdKHANjXlLaFjurn2asLaPjul1NWeSUdFysXUST:cItdKHANjXqapsL4juRNSUC0
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan