smokeloader | d8540bf0d023fb52acbfae2ef9aeebb745007e4e699c1668dcef889617a829b8 | Triage

Sharing

General

Target

d8540bf0d023fb52acbfae2ef9aeebb745007e4e699c1668dcef889617a829b8.exe
Size

212KB
Sample

240820-vz3cksybpr
MD5

da1a2adcfb1416a65424b526625fc19d
SHA1

bcaa2bd89dbcbd65369eb04c40a2176d6a8a3bc4
SHA256

d8540bf0d023fb52acbfae2ef9aeebb745007e4e699c1668dcef889617a829b8
SHA512

a9c91ff3b4699cc1732c4eddddb09d6c15c107afa95a112eae7c2d17d5058b4b68ce6db5399eea5708dcc21f7fc6323287c69972a5d54762082f6ad969b2e90a
SSDEEP

3072:vL9N3/RuQpSFO6ZgPxpJcb91qL4SGPqkLOoMvn5Ah:vL9N3/RuQpSQkgjJaQL4SGPj5

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  d8540bf0d023fb52acbfae2ef9aeebb745007e4e699c1668dcef889617a829b8.exe
- Size
  
  212KB
- MD5
  
  da1a2adcfb1416a65424b526625fc19d
- SHA1
  
  bcaa2bd89dbcbd65369eb04c40a2176d6a8a3bc4
- SHA256
  
  d8540bf0d023fb52acbfae2ef9aeebb745007e4e699c1668dcef889617a829b8
- SHA512
  
  a9c91ff3b4699cc1732c4eddddb09d6c15c107afa95a112eae7c2d17d5058b4b68ce6db5399eea5708dcc21f7fc6323287c69972a5d54762082f6ad969b2e90a
- SSDEEP
  
  3072:vL9N3/RuQpSFO6ZgPxpJcb91qL4SGPqkLOoMvn5Ah:vL9N3/RuQpSQkgjJaQL4SGPj5
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan