smokeloader | 30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45 | Triage

Sharing

General

Target

30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45.exe
Size

216KB
Sample

240820-rglekazcqq
MD5

18dbe9f4f27dc46f7fb7c06643c47167
SHA1

eaa5b4b36fb9a92b17186ae954d0b61ea1a8bc68
SHA256

30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45
SHA512

9c84ff20ee18097385e18679a29e51fc18144f9a6c543e668fb6ecd5176c3fc52392c9a0b964648cec78174248337ca60a6da2615b4666d0eceda4cb440bae41
SSDEEP

3072:jOKL7HwvSFX7DB3dLesCC8H5vX8vnhhRN085HhpH1:nLTwvSFLD1dL9CC8H5XQhhR

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45.exe
- Size
  
  216KB
- MD5
  
  18dbe9f4f27dc46f7fb7c06643c47167
- SHA1
  
  eaa5b4b36fb9a92b17186ae954d0b61ea1a8bc68
- SHA256
  
  30f0d6e1a730d2f350d921013df99deced8810b8506a004d97734ff4c1a8ab45
- SHA512
  
  9c84ff20ee18097385e18679a29e51fc18144f9a6c543e668fb6ecd5176c3fc52392c9a0b964648cec78174248337ca60a6da2615b4666d0eceda4cb440bae41
- SSDEEP
  
  3072:jOKL7HwvSFX7DB3dLesCC8H5vX8vnhhRN085HhpH1:nLTwvSFLD1dL9CC8H5XQhhR
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan