smokeloader | 88b5ed74d4fc6f2cf6394bd1766f44df61e7dc9b810cfacbecba5b34af3bf57d | Triage

Sharing

General

Target

88b5ed74d4fc6f2cf6394bd1766f44df61e7dc9b810cfacbecba5b34af3bf57d.exe
Size

208KB
Sample

240823-cr94casgjj
MD5

e79a2bcf684a6ffbc4cfad76edf27809
SHA1

6b8da04818ea775dbf16408a4c8a8ca71ceae606
SHA256

88b5ed74d4fc6f2cf6394bd1766f44df61e7dc9b810cfacbecba5b34af3bf57d
SHA512

a598742bfcafed7e2f2c6f20f329b76be5db6d971e66625d0328818f0b69aadf666073d546d678ecf61c43568cd669c6780b8888997d9999c75345ce71b50865
SSDEEP

3072:jnlkzihcAP3LNot2Y8QEoc2Duj+5s1T1gMh4ZO:jnh5zCOoHET

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  88b5ed74d4fc6f2cf6394bd1766f44df61e7dc9b810cfacbecba5b34af3bf57d.exe
- Size
  
  208KB
- MD5
  
  e79a2bcf684a6ffbc4cfad76edf27809
- SHA1
  
  6b8da04818ea775dbf16408a4c8a8ca71ceae606
- SHA256
  
  88b5ed74d4fc6f2cf6394bd1766f44df61e7dc9b810cfacbecba5b34af3bf57d
- SHA512
  
  a598742bfcafed7e2f2c6f20f329b76be5db6d971e66625d0328818f0b69aadf666073d546d678ecf61c43568cd669c6780b8888997d9999c75345ce71b50865
- SSDEEP
  
  3072:jnlkzihcAP3LNot2Y8QEoc2Duj+5s1T1gMh4ZO:jnh5zCOoHET
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan