smokeloader | 4ba27be6350f3474a76793e679f5d8426b66673ba0933d5aeaeb422dbc6caeeb | Triage

Sharing

General

Target

4ba27be6350f3474a76793e679f5d8426b66673ba0933d5aeaeb422dbc6caeeb.exe
Size

211KB
Sample

240821-marksawfqq
MD5

4a5657725f15936a7f19f28e15028350
SHA1

64575247df10f3ff10c6564d3987b6f7f30355fc
SHA256

4ba27be6350f3474a76793e679f5d8426b66673ba0933d5aeaeb422dbc6caeeb
SHA512

52a5c46a68f52e12ebae838fc91dac4a9451c86457f40dbcefd43661597b3abc241c02b4eceeb7a8a384c746ccada57082d21d245e8a655de7f29e066541043d
SSDEEP

1536:aiJpP8tLA+kAQP2XPr5wdxLrOoWWszp5xU8ndpR4pjFOmyCMd2+lcKB3s9ox5Y4Y:FmLAnOyx2oDszTyQ2OmyCQB3Vx5VY

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  4ba27be6350f3474a76793e679f5d8426b66673ba0933d5aeaeb422dbc6caeeb.exe
- Size
  
  211KB
- MD5
  
  4a5657725f15936a7f19f28e15028350
- SHA1
  
  64575247df10f3ff10c6564d3987b6f7f30355fc
- SHA256
  
  4ba27be6350f3474a76793e679f5d8426b66673ba0933d5aeaeb422dbc6caeeb
- SHA512
  
  52a5c46a68f52e12ebae838fc91dac4a9451c86457f40dbcefd43661597b3abc241c02b4eceeb7a8a384c746ccada57082d21d245e8a655de7f29e066541043d
- SSDEEP
  
  1536:aiJpP8tLA+kAQP2XPr5wdxLrOoWWszp5xU8ndpR4pjFOmyCMd2+lcKB3s9ox5Y4Y:FmLAnOyx2oDszTyQ2OmyCQB3Vx5VY
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan