smokeloader | c2b0a35709bb01c5417fec706b3fe6b5c6ba30c74173e2274d99caff9c89ea1a | Triage

Sharing

General

Target

c2b0a35709bb01c5417fec706b3fe6b5c6ba30c74173e2274d99caff9c89ea1a.exe
Size

257KB
Sample

240820-cceznasamm
MD5

c455e4fe919c0691277b5a33f0e0942b
SHA1

4f43294230fa81fcedc676ae31a2adc44a148355
SHA256

c2b0a35709bb01c5417fec706b3fe6b5c6ba30c74173e2274d99caff9c89ea1a
SHA512

33d5f97f84b3b784fdf474e9251ba4dfa1a56dbcc59b3896ddc7d7587b74de6d8c2beb47271545cff1bed37368fded7d040667b9083b5c8c8f5bcb7ad06bb99e
SSDEEP

3072:ir9lM+crCJdubX/otibz305sTfCT7LgJTr:49cm9y9KrgJT

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  c2b0a35709bb01c5417fec706b3fe6b5c6ba30c74173e2274d99caff9c89ea1a.exe
- Size
  
  257KB
- MD5
  
  c455e4fe919c0691277b5a33f0e0942b
- SHA1
  
  4f43294230fa81fcedc676ae31a2adc44a148355
- SHA256
  
  c2b0a35709bb01c5417fec706b3fe6b5c6ba30c74173e2274d99caff9c89ea1a
- SHA512
  
  33d5f97f84b3b784fdf474e9251ba4dfa1a56dbcc59b3896ddc7d7587b74de6d8c2beb47271545cff1bed37368fded7d040667b9083b5c8c8f5bcb7ad06bb99e
- SSDEEP
  
  3072:ir9lM+crCJdubX/otibz305sTfCT7LgJTr:49cm9y9KrgJT
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan