smokeloader | cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e | Triage

Sharing

General

Target

cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e.exe
Size

200KB
Sample

240820-cdn9qasarq
MD5

17f7f4b11e8083758da38898181e0bbd
SHA1

7405193384b8f024061d73ff51fa8fcee774c9aa
SHA256

cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e
SHA512

62cc0a29232a8d160ac19c9236b12888b2319f99cd6a43aa2ea484491160502f6df0a63957f460524c5cfd59c9763a7c88e2cbba788cc560c80cbf315c033653
SSDEEP

1536:4diUKLvcUhxR3t5PGE0Ul5KNHdHkGJPxAka4BEJK6+lkUYq8vK5g9o5NNNJH0AE0:fLvv3tcE0vHdEGck8JTgk985x5NZ

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e.exe
- Size
  
  200KB
- MD5
  
  17f7f4b11e8083758da38898181e0bbd
- SHA1
  
  7405193384b8f024061d73ff51fa8fcee774c9aa
- SHA256
  
  cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e
- SHA512
  
  62cc0a29232a8d160ac19c9236b12888b2319f99cd6a43aa2ea484491160502f6df0a63957f460524c5cfd59c9763a7c88e2cbba788cc560c80cbf315c033653
- SSDEEP
  
  1536:4diUKLvcUhxR3t5PGE0Ul5KNHdHkGJPxAka4BEJK6+lkUYq8vK5g9o5NNNJH0AE0:fLvv3tcE0vHdEGck8JTgk985x5NZ
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan