smokeloader | 54d8bcd64a7f6673503c880e30cc80432525f6b9261f3d1182c4494f9074197d | Triage

Sharing

General

Target

54d8bcd64a7f6673503c880e30cc80432525f6b9261f3d1182c4494f9074197d.exe
Size

215KB
Sample

240820-bvhylawhqf
MD5

83c412d8444c58a4c149e83daa15d057
SHA1

ef0718704b80d3afa07e33a3fae034efcda4d6b4
SHA256

54d8bcd64a7f6673503c880e30cc80432525f6b9261f3d1182c4494f9074197d
SHA512

79391c1a6369e1bc49ad2df75ee09de124a57648fc58acf5f560bee4e7e34d5da8d5ce81337f8f2f26ddb7dfaacdb653091089a108de22ce0bca39e9aef2c6c5
SSDEEP

3072:T3OLGSM9W6dBxs0vyty6pV4LG5VcQJUkJTtm85Dg:iLGSMJxsEywILfcQ9o

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  54d8bcd64a7f6673503c880e30cc80432525f6b9261f3d1182c4494f9074197d.exe
- Size
  
  215KB
- MD5
  
  83c412d8444c58a4c149e83daa15d057
- SHA1
  
  ef0718704b80d3afa07e33a3fae034efcda4d6b4
- SHA256
  
  54d8bcd64a7f6673503c880e30cc80432525f6b9261f3d1182c4494f9074197d
- SHA512
  
  79391c1a6369e1bc49ad2df75ee09de124a57648fc58acf5f560bee4e7e34d5da8d5ce81337f8f2f26ddb7dfaacdb653091089a108de22ce0bca39e9aef2c6c5
- SSDEEP
  
  3072:T3OLGSM9W6dBxs0vyty6pV4LG5VcQJUkJTtm85Dg:iLGSMJxsEywILfcQ9o
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan