smokeloader | f691d08d4d08a092f52d63eb5a5fce0cbdeeaa042c18282c73ac5ebb627c25d3 | Triage

Sharing

General

Target

a4bc249dc997df25a0e709eee0a0df87.exe
Size

403KB
Sample

240902-gqxtvatdpl
MD5

a4bc249dc997df25a0e709eee0a0df87
SHA1

d4bd3dcc3c5c1bed477f3eccbf1561b4c4f9180b
SHA256

f691d08d4d08a092f52d63eb5a5fce0cbdeeaa042c18282c73ac5ebb627c25d3
SHA512

e4c12400284ea1b11c13b85c19aaf41569c40be1519adbb2d388ae1ddbb06caa7ba08898f42ce0de19640769418267908c1282c734164b3714b40541c18cce36
SSDEEP

6144:k2Lh2Mw6FnhZ+ObiTteTqeN1qRU1WG0S2IcNPk:kSh2JYnhoObK4MUCXi

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  a4bc249dc997df25a0e709eee0a0df87.exe
- Size
  
  403KB
- MD5
  
  a4bc249dc997df25a0e709eee0a0df87
- SHA1
  
  d4bd3dcc3c5c1bed477f3eccbf1561b4c4f9180b
- SHA256
  
  f691d08d4d08a092f52d63eb5a5fce0cbdeeaa042c18282c73ac5ebb627c25d3
- SHA512
  
  e4c12400284ea1b11c13b85c19aaf41569c40be1519adbb2d388ae1ddbb06caa7ba08898f42ce0de19640769418267908c1282c734164b3714b40541c18cce36
- SSDEEP
  
  6144:k2Lh2Mw6FnhZ+ObiTteTqeN1qRU1WG0S2IcNPk:kSh2JYnhoObK4MUCXi
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan