smokeloader | 22f568f74e41d465367c40963da932a06d3c4b455f0398cba074885cdf99a735 | Triage

Sharing

General

Target

2112-2-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240822-h51dysvcpa
MD5

64c33cb65fe2797a5933885de69c044d
SHA1

b2b5b9b6348b89af192c8f85299c3facba6a91e2
SHA256

22f568f74e41d465367c40963da932a06d3c4b455f0398cba074885cdf99a735
SHA512

9eaa6b37bd138a843c4ac7b24b3f92f0a6b71ba01aea6446c0aad38b247b856b4ac61508ef9e018d38f510542f0b1d1f9315db30685d1b56210ddf4ef1a00622
SSDEEP

768:CazBIa4ueiy5prjiFvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWrjTSiN2lz/e7kcueKZN

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  2112-2-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  64c33cb65fe2797a5933885de69c044d
- SHA1
  
  b2b5b9b6348b89af192c8f85299c3facba6a91e2
- SHA256
  
  22f568f74e41d465367c40963da932a06d3c4b455f0398cba074885cdf99a735
- SHA512
  
  9eaa6b37bd138a843c4ac7b24b3f92f0a6b71ba01aea6446c0aad38b247b856b4ac61508ef9e018d38f510542f0b1d1f9315db30685d1b56210ddf4ef1a00622
- SSDEEP
  
  768:CazBIa4ueiy5prjiFvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWrjTSiN2lz/e7kcueKZN
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pub2smokeloader

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan