smokeloader | 82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c | Triage

Sharing

General

Target

82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c.exe
Size

208KB
Sample

240823-cq1taasflp
MD5

4f132cd93fe858362c4feb4d4effd90a
SHA1

6227cb221e604ec4d9c0e00a2d0ced0fb14a23fc
SHA256

82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c
SHA512

8dffd1a9fb21bae9bbf0153887d60e20fbcab86452e654e4ed2b66a993f91af48e520751bcd3535949e37eb4976aec057bb1710b27f610ef40d96d71100ffc68
SSDEEP

3072:+XSI/Bv48I9DWF/VLVqY81GcPE5EZRrBLrcJ7itM:+XcX9DWB1ZtarFgJ

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c.exe
- Size
  
  208KB
- MD5
  
  4f132cd93fe858362c4feb4d4effd90a
- SHA1
  
  6227cb221e604ec4d9c0e00a2d0ced0fb14a23fc
- SHA256
  
  82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c
- SHA512
  
  8dffd1a9fb21bae9bbf0153887d60e20fbcab86452e654e4ed2b66a993f91af48e520751bcd3535949e37eb4976aec057bb1710b27f610ef40d96d71100ffc68
- SSDEEP
  
  3072:+XSI/Bv48I9DWF/VLVqY81GcPE5EZRrBLrcJ7itM:+XcX9DWB1ZtarFgJ
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan