smokeloader | 0fcda23a1e98e83e1853c2d7526788be7c46f29a5eff17a5cb0360bc0ad5e54b | Triage

Sharing

General

Target

0fcda23a1e98e83e1853c2d7526788be7c46f29a5eff17a5cb0360bc0ad5e54b
Size

359KB
Sample

240822-rneklatgpj
MD5

597ce9b6d8ec065ed8af37d3cc2c4983
SHA1

869504b52b668a05d5577a4c485fa09189da4934
SHA256

0fcda23a1e98e83e1853c2d7526788be7c46f29a5eff17a5cb0360bc0ad5e54b
SHA512

a2630e8631ec9c8f5039497c0686ab6f377c47ce86c5b631950ee50bf52ac76d8ed083190a935cdacc5c7ef5fc0e170db766595b696f7d6af467247189813539
SSDEEP

6144:oE4+e/GdmJZtA7vtHuMF9Vuo/AAC0lkqB6TU9XmjB5agOYrz5jE:oB+e/GoJZt4vJuE9nYAC0GqBsEWjzag

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  0fcda23a1e98e83e1853c2d7526788be7c46f29a5eff17a5cb0360bc0ad5e54b
- Size
  
  359KB
- MD5
  
  597ce9b6d8ec065ed8af37d3cc2c4983
- SHA1
  
  869504b52b668a05d5577a4c485fa09189da4934
- SHA256
  
  0fcda23a1e98e83e1853c2d7526788be7c46f29a5eff17a5cb0360bc0ad5e54b
- SHA512
  
  a2630e8631ec9c8f5039497c0686ab6f377c47ce86c5b631950ee50bf52ac76d8ed083190a935cdacc5c7ef5fc0e170db766595b696f7d6af467247189813539
- SSDEEP
  
  6144:oE4+e/GdmJZtA7vtHuMF9Vuo/AAC0lkqB6TU9XmjB5agOYrz5jE:oB+e/GoJZt4vJuE9nYAC0GqBsEWjzag
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan