smokeloader | 1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728 | Triage

Sharing

General

Target

1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728.exe
Size

257KB
Sample

240820-bhcwtazdpl
MD5

bd6490aeabc3f78750ef837986122876
SHA1

4d417c64f227349b40f2c95ce03e71f977045941
SHA256

1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728
SHA512

ae50ab3d3e6fc445a3ff203283eaf7d079655602d40b1c21e16f0f05bd155c9da7e88ce498841b1f57cb5c5f17e79f10a17c08d7e9fdb6bff37bb2030af28ec3
SSDEEP

3072:QSXQC0rYFzKwFH1A/HmP7Sfj5rxTfCT7LNOYr:rh0rYF+w3oGjGKrF

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728.exe
- Size
  
  257KB
- MD5
  
  bd6490aeabc3f78750ef837986122876
- SHA1
  
  4d417c64f227349b40f2c95ce03e71f977045941
- SHA256
  
  1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728
- SHA512
  
  ae50ab3d3e6fc445a3ff203283eaf7d079655602d40b1c21e16f0f05bd155c9da7e88ce498841b1f57cb5c5f17e79f10a17c08d7e9fdb6bff37bb2030af28ec3
- SSDEEP
  
  3072:QSXQC0rYFzKwFH1A/HmP7Sfj5rxTfCT7LNOYr:rh0rYF+w3oGjGKrF
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan