smokeloader | e75102f75f478c346b1dd2ebd56311a9d7345d3c785a6b2dc2911033a317c485 | Triage

Sharing

General

Target

fde6805bfafb91eb3e7c5d04d07ed9d4.exe
Size

249KB
Sample

240820-nvleyazbqf
MD5

fde6805bfafb91eb3e7c5d04d07ed9d4
SHA1

f6b8c73b22ee0059e5dc646aebb6d275f1a87886
SHA256

e75102f75f478c346b1dd2ebd56311a9d7345d3c785a6b2dc2911033a317c485
SHA512

b29879a2fe4384ae00aaae2dfa9d0b7e40f37297ebc0d0eeccea63e7b32143399474dddef8dabf45910b044b51d882f45e2334b2def17d5a593b5c2a372589ac
SSDEEP

1536:IFlxYBmDp+G0lr05PebyltZkUeHsdr4n9K0s50FyPFSxSJ0m5woe2tVaPc9oYGzy:MGBm0tyfRdAKP50MScf5I2zoYtB

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  fde6805bfafb91eb3e7c5d04d07ed9d4.exe
- Size
  
  249KB
- MD5
  
  fde6805bfafb91eb3e7c5d04d07ed9d4
- SHA1
  
  f6b8c73b22ee0059e5dc646aebb6d275f1a87886
- SHA256
  
  e75102f75f478c346b1dd2ebd56311a9d7345d3c785a6b2dc2911033a317c485
- SHA512
  
  b29879a2fe4384ae00aaae2dfa9d0b7e40f37297ebc0d0eeccea63e7b32143399474dddef8dabf45910b044b51d882f45e2334b2def17d5a593b5c2a372589ac
- SSDEEP
  
  1536:IFlxYBmDp+G0lr05PebyltZkUeHsdr4n9K0s50FyPFSxSJ0m5woe2tVaPc9oYGzy:MGBm0tyfRdAKP50MScf5I2zoYtB
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan