smokeloader | 822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87 | Triage

Sharing

General

Target

9753b8ad3204443226a2b298da8242be.exe
Size

411KB
Sample

240902-akfvtawhra
MD5

9753b8ad3204443226a2b298da8242be
SHA1

60c61650311944accdaf8fb78bca663d8cdde241
SHA256

822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87
SHA512

b5a808f0f8e3f1e7e61d99514809606c8d3b12f50bbbb9891967aee020cbbdcaf026ed86dcc11262b5c2e9d5ff19cd1e420fe971e4110ee7bb474dbdac77004a
SSDEEP

6144:KsL00ZALltugI4avTmF1Y58qg3h58A9rFo:KORZALltIm28d3hOAw

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  9753b8ad3204443226a2b298da8242be.exe
- Size
  
  411KB
- MD5
  
  9753b8ad3204443226a2b298da8242be
- SHA1
  
  60c61650311944accdaf8fb78bca663d8cdde241
- SHA256
  
  822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87
- SHA512
  
  b5a808f0f8e3f1e7e61d99514809606c8d3b12f50bbbb9891967aee020cbbdcaf026ed86dcc11262b5c2e9d5ff19cd1e420fe971e4110ee7bb474dbdac77004a
- SSDEEP
  
  6144:KsL00ZALltugI4avTmF1Y58qg3h58A9rFo:KORZALltIm28d3hOAw
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan