smokeloader | f72539730299fd2d06bd1be0d9bd2fe1408650fd02f06f0dd16a24611d4f2fa9 | Triage

Sharing

General

Target

2504-4-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240822-jcm4lavfjb
MD5

7240c16599165608cfea31563aef7c53
SHA1

f8fa3f85e00abdbc53aeb7950cbe8ab8a17d9a59
SHA256

f72539730299fd2d06bd1be0d9bd2fe1408650fd02f06f0dd16a24611d4f2fa9
SHA512

a6d1a25a63683023820825d106e2bad737a0bf77f81b5498094d8b38e1c850d52113edbbdb25ac63bf7db1a72a7817c5a20c6f8d79ee2af7a243d13f86adeabc
SSDEEP

768:Z/8mWE+vc4v6DhR8ZSDc28hO3c3VgDeoVZnE:2a+04v6DhR8658533s

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  2504-4-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  7240c16599165608cfea31563aef7c53
- SHA1
  
  f8fa3f85e00abdbc53aeb7950cbe8ab8a17d9a59
- SHA256
  
  f72539730299fd2d06bd1be0d9bd2fe1408650fd02f06f0dd16a24611d4f2fa9
- SHA512
  
  a6d1a25a63683023820825d106e2bad737a0bf77f81b5498094d8b38e1c850d52113edbbdb25ac63bf7db1a72a7817c5a20c6f8d79ee2af7a243d13f86adeabc
- SSDEEP
  
  768:Z/8mWE+vc4v6DhR8ZSDc28hO3c3VgDeoVZnE:2a+04v6DhR8658533s
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pub1smokeloader

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan