smokeloader | 0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e | Triage

Sharing

General

Target

0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e.exe
Size

40KB
Sample

240824-bcrssaxbme
MD5

9fa16b0731670c52787474e4afd46bb5
SHA1

55aff02f1679000370f4d5f2bd24944d61fa9c0c
SHA256

0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e
SHA512

0d9f5f61d2f9033235ba9abd364c7edced5c3f73d104cc3a285bec07c949be05fd8326b8e1333de2aa4a0101461ead39f3326e28dea438598942f51ee1f84919
SSDEEP

768:CazBIa4ueiy5pj0FvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWjtSiN2lz/e7kcueKZN

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e.exe
- Size
  
  40KB
- MD5
  
  9fa16b0731670c52787474e4afd46bb5
- SHA1
  
  55aff02f1679000370f4d5f2bd24944d61fa9c0c
- SHA256
  
  0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e
- SHA512
  
  0d9f5f61d2f9033235ba9abd364c7edced5c3f73d104cc3a285bec07c949be05fd8326b8e1333de2aa4a0101461ead39f3326e28dea438598942f51ee1f84919
- SSDEEP
  
  768:CazBIa4ueiy5pj0FvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWjtSiN2lz/e7kcueKZN
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan