smokeloader | 988dc2055d4448baef0e0312b3d64448094f3bfa018849175778b2e720cd02a0 | Triage

Sharing

General

Target

4d4a4bb6e3e735176db24307fce734b0N.exe
Size

216KB
Sample

240819-qg4epswbnf
MD5

4d4a4bb6e3e735176db24307fce734b0
SHA1

c3ea6253b93655af4c42a5933aec13b797c4ca12
SHA256

988dc2055d4448baef0e0312b3d64448094f3bfa018849175778b2e720cd02a0
SHA512

367a3b6e1e196454cb22995e7426ade8dd0d13ba56db79f9328e599fc609be1fdb5d498609dfe926e7c2e6b94b6e4520d435a3f35e153fb35e53e067d25f2886
SSDEEP

3072:30LxvdrLtwByH8VIWH/B8UIl22IfGjYq5ioZ3c:wvdOsH8VIWmB1h

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  4d4a4bb6e3e735176db24307fce734b0N.exe
- Size
  
  216KB
- MD5
  
  4d4a4bb6e3e735176db24307fce734b0
- SHA1
  
  c3ea6253b93655af4c42a5933aec13b797c4ca12
- SHA256
  
  988dc2055d4448baef0e0312b3d64448094f3bfa018849175778b2e720cd02a0
- SHA512
  
  367a3b6e1e196454cb22995e7426ade8dd0d13ba56db79f9328e599fc609be1fdb5d498609dfe926e7c2e6b94b6e4520d435a3f35e153fb35e53e067d25f2886
- SSDEEP
  
  3072:30LxvdrLtwByH8VIWH/B8UIl22IfGjYq5ioZ3c:wvdOsH8VIWmB1h
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan