smokeloader | 41d38ed7396b03eaa10f074a3af4f6cf2e687049c23a8e369c870df49ffdd5f6 | Triage

Sharing

General

Target

135f7e21ebe965bc4a1143d4d542f7d1.exe
Size

214KB
Sample

240820-nwrckszcng
MD5

135f7e21ebe965bc4a1143d4d542f7d1
SHA1

096950e8f1843ab51ae6203197d7851be7d4817f
SHA256

41d38ed7396b03eaa10f074a3af4f6cf2e687049c23a8e369c870df49ffdd5f6
SHA512

bdfcabbfc8dcdaeb33d5783cb77e668e78a998a5693218ac9eda9da61e8c1fd52251dc346a76811aaa38bd1ac04d605086be0fa2f6be01e89cbdad91b86d94d3
SSDEEP

3072:f2LAwnCaTHFHwsZoYlwKWJBjpOdAlchoiRt5dXu:eLAwnCjYldWHpObhoA+

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  135f7e21ebe965bc4a1143d4d542f7d1.exe
- Size
  
  214KB
- MD5
  
  135f7e21ebe965bc4a1143d4d542f7d1
- SHA1
  
  096950e8f1843ab51ae6203197d7851be7d4817f
- SHA256
  
  41d38ed7396b03eaa10f074a3af4f6cf2e687049c23a8e369c870df49ffdd5f6
- SHA512
  
  bdfcabbfc8dcdaeb33d5783cb77e668e78a998a5693218ac9eda9da61e8c1fd52251dc346a76811aaa38bd1ac04d605086be0fa2f6be01e89cbdad91b86d94d3
- SSDEEP
  
  3072:f2LAwnCaTHFHwsZoYlwKWJBjpOdAlchoiRt5dXu:eLAwnCjYldWHpObhoA+
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2