smokeloader | fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615 | Triage

Sharing

General

Target

fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615.exe
Size

214KB
Sample

240821-c5aweazenp
MD5

9d1f6aa879623e6d6f33384eb46dd2b2
SHA1

bab2f64f333c98a7f4a2de710d6c049c86ee337f
SHA256

fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615
SHA512

c1b48826c539795cbda80c0e77bb2bf3faf6bb2bf9d1a65c7de0bc49fec564cc9f8e9b7c77e4fa9cd825e4c5f10e14ce4669400a0b657b9e459d2fe0ca28b189
SSDEEP

1536:eJ+TtgGcg3SagFZIDgH7MBCPJWZVzf5FWgXRJz+27tZrPdo1C5LF2rk8y5YcXEbH:F2GyEgHINnzfv1XO478y5Dc

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615.exe
- Size
  
  214KB
- MD5
  
  9d1f6aa879623e6d6f33384eb46dd2b2
- SHA1
  
  bab2f64f333c98a7f4a2de710d6c049c86ee337f
- SHA256
  
  fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615
- SHA512
  
  c1b48826c539795cbda80c0e77bb2bf3faf6bb2bf9d1a65c7de0bc49fec564cc9f8e9b7c77e4fa9cd825e4c5f10e14ce4669400a0b657b9e459d2fe0ca28b189
- SSDEEP
  
  1536:eJ+TtgGcg3SagFZIDgH7MBCPJWZVzf5FWgXRJz+27tZrPdo1C5LF2rk8y5YcXEbH:F2GyEgHINnzfv1XO478y5Dc
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan