smokeloader | bb50377f9ddbde36f47a05c9699d412ade541156a9a1b444f5247357198bdd58 | Triage

Sharing

General

Target

7170701e4da460f17527eb635901c079.exe
Size

199KB
Sample

240820-nvleyatekj
MD5

7170701e4da460f17527eb635901c079
SHA1

90c55303051c9a529a8c6cd2b469e4f9771cc634
SHA256

bb50377f9ddbde36f47a05c9699d412ade541156a9a1b444f5247357198bdd58
SHA512

a973294a243c62faed08f48da2574d386a27f1d255decdf2ece50b570e57e5fca6fa3f4b8ca838d962436ff707b0eccbe4d23aecf11378d3d923b6639c91dbd0
SSDEEP

1536:Yx0pMj6xLWfYc7W6vcPunWLJcCpIHbOM4g48BnluY1cy38fpY5vKkx1xjGK3Y:h/L7kbWLyCO7OxgJnQy38fS5vHz+

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  7170701e4da460f17527eb635901c079.exe
- Size
  
  199KB
- MD5
  
  7170701e4da460f17527eb635901c079
- SHA1
  
  90c55303051c9a529a8c6cd2b469e4f9771cc634
- SHA256
  
  bb50377f9ddbde36f47a05c9699d412ade541156a9a1b444f5247357198bdd58
- SHA512
  
  a973294a243c62faed08f48da2574d386a27f1d255decdf2ece50b570e57e5fca6fa3f4b8ca838d962436ff707b0eccbe4d23aecf11378d3d923b6639c91dbd0
- SSDEEP
  
  1536:Yx0pMj6xLWfYc7W6vcPunWLJcCpIHbOM4g48BnluY1cy38fpY5vKkx1xjGK3Y:h/L7kbWLyCO7OxgJnQy38fS5vHz+
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan