smokeloader | cbf503576b78b2cf087fdfefdba71c408b48d12b87ba08673125227f794274fa | Triage

Sharing

General

Target

cbf503576b78b2cf087fdfefdba71c408b48d12b87ba08673125227f794274fa
Size

26KB
Sample

240902-d7673a1akq
MD5

01bf3ddd33fdeb2a6f2d2b9daedf57a5
SHA1

fe7f4a5431584d7488bbb33367a11a07f7e909f8
SHA256

cbf503576b78b2cf087fdfefdba71c408b48d12b87ba08673125227f794274fa
SHA512

223f6a2516ef265fc388901864170cb9c1c5fb6960671e8af2e23fbb7ec2b7cf10a671c65779eb5d14ae3dd793e68a8be8873d01c2f0fc4d88cbc2ba2e9c7ca6
SSDEEP

768:6BIDWXcJWpW2n2NttnoKiKL39Y8PwXhKw7T3bVU4M:z6X9NnAoE2FXfT3CV

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  89a0227ef833a2742f7dd46be36e61b178a8b47846fd3cf557c8b9991b7cfb67
- Size
  
  29KB
- MD5
  
  55bf2bbdd87ec3ac709c6a247f4a28b4
- SHA1
  
  6df7d9af3a7b2da1c91aff955a4c5aadbe2d13cb
- SHA256
  
  89a0227ef833a2742f7dd46be36e61b178a8b47846fd3cf557c8b9991b7cfb67
- SHA512
  
  dcaa8ab6b31105a3ec82454008cd4835a1728ccb6fceee8ae89ce4198a0555a72ed9345a6acb0d9c80dcaa40608483f13bb35a255e832e01a6ea1bd463439aa2
- SSDEEP
  
  768:BAGygotBbsWyj5bVotP1DbUBLnW3xLfflPi5wiw:BAGnsbq1bkP1DbUl0FD1
Score

10^/10

smokeloader pub5 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoortrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan