smokeloader | 083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9 | Triage

Sharing

General

Target

083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9.exe
Size

200KB
Sample

240820-p3atvawfrj
MD5

578ca3bad325b98d29d5236047d46837
SHA1

1eaf830fd2e8680be5c575a7b04b3ea5323bfa82
SHA256

083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9
SHA512

04a586a0657d998d65cc442451005ccd0532f68a800e4f784c5a35d5819e0bc15ec6016a9ee1e7a4e75830c51145c53866cc6508d2960635e24b751ed4be9ecc
SSDEEP

3072:kvLHoXGY8x+vuL9qGXvTKN4sSkOBh54RRj:ILHoWYYl9qGv+DB

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9.exe
- Size
  
  200KB
- MD5
  
  578ca3bad325b98d29d5236047d46837
- SHA1
  
  1eaf830fd2e8680be5c575a7b04b3ea5323bfa82
- SHA256
  
  083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9
- SHA512
  
  04a586a0657d998d65cc442451005ccd0532f68a800e4f784c5a35d5819e0bc15ec6016a9ee1e7a4e75830c51145c53866cc6508d2960635e24b751ed4be9ecc
- SSDEEP
  
  3072:kvLHoXGY8x+vuL9qGXvTKN4sSkOBh54RRj:ILHoWYYl9qGv+DB
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan