smokeloader | 4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca | Triage

Sharing

General

Target

4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca.exe
Size

215KB
Sample

240820-bnp4bszgjj
MD5

37196d4e134a46261437d125cbb6106f
SHA1

a95acd837f9246c6705a7c1d0759a2a92e7c3115
SHA256

4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca
SHA512

08f194afe8c73e0f3ae7d2039c8372a4c9362fa922557ae4190c2cfc1388d5991f92d4552122021a27fcbcf744faac05dcb552225e7c41e6cdc1cc6165112f66
SSDEEP

1536:RgqRq7WZCIrwtMpF1x0Pyb7/JF5c6w1cnJ5Q8L3xg3JRlgndoFGWLV2VkWa56UBR:yXZIrwUjpcb1S7Wk23FWa5Sk3G3c

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca.exe
- Size
  
  215KB
- MD5
  
  37196d4e134a46261437d125cbb6106f
- SHA1
  
  a95acd837f9246c6705a7c1d0759a2a92e7c3115
- SHA256
  
  4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca
- SHA512
  
  08f194afe8c73e0f3ae7d2039c8372a4c9362fa922557ae4190c2cfc1388d5991f92d4552122021a27fcbcf744faac05dcb552225e7c41e6cdc1cc6165112f66
- SSDEEP
  
  1536:RgqRq7WZCIrwtMpF1x0Pyb7/JF5c6w1cnJ5Q8L3xg3JRlgndoFGWLV2VkWa56UBR:yXZIrwUjpcb1S7Wk23FWa5Sk3G3c
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan