smokeloader | 8f2c6eaad807830b0f43114d62275020058a6fd3b0ac60dd1c4a9dc507b7d66e | Triage

Sharing

General

Target

c366cef60cf79292de9b858721896e5b.exe
Size

200KB
Sample

240820-nv7m6szclb
MD5

c366cef60cf79292de9b858721896e5b
SHA1

2084522df7140bb8d0aa6b127e24b52d583f4da7
SHA256

8f2c6eaad807830b0f43114d62275020058a6fd3b0ac60dd1c4a9dc507b7d66e
SHA512

6538b1640d87cdb23e05f3833e19cd7d9f7969ef4a64e468d23efc8f1ca03aec6706bb0e9aad39b1e589479693d8c2830df8d0fd62b84ecff8ce1e9b44323c4f
SSDEEP

3072:keL0evN5IJeJvm1Rse7TpE6dQqGhJNPw5A6dxC:keL0evNuJeZ6R77TpJmhGC

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  c366cef60cf79292de9b858721896e5b.exe
- Size
  
  200KB
- MD5
  
  c366cef60cf79292de9b858721896e5b
- SHA1
  
  2084522df7140bb8d0aa6b127e24b52d583f4da7
- SHA256
  
  8f2c6eaad807830b0f43114d62275020058a6fd3b0ac60dd1c4a9dc507b7d66e
- SHA512
  
  6538b1640d87cdb23e05f3833e19cd7d9f7969ef4a64e468d23efc8f1ca03aec6706bb0e9aad39b1e589479693d8c2830df8d0fd62b84ecff8ce1e9b44323c4f
- SSDEEP
  
  3072:keL0evN5IJeJvm1Rse7TpE6dQqGhJNPw5A6dxC:keL0evNuJeZ6R77TpJmhGC
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan