smokeloader | 4c0709a9cefb7821f2664828c9bdbdfa04201f75861df825a201a0be013fa3e3 | Triage

Sharing

General

Target

2336-3-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240914-bjr25aygjj
MD5

a5a2b9323dfb78a75a29b34af0bacf7c
SHA1

335ceb110d946f182c22d34400a0805284dd45d6
SHA256

4c0709a9cefb7821f2664828c9bdbdfa04201f75861df825a201a0be013fa3e3
SHA512

9ab8d031a393e2e56bcc70e8295bbc08675d61429e6a39144ecb33bd89196e699d891a1fa2237131bef54272233dd9a71300f55e9c1c1eeb036f119db553e0c1
SSDEEP

768:LaFq5EYYNuZNe3moyGali+xP1Ux+v/RN:LaEzNXCXyRJxk6j

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  2336-3-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  a5a2b9323dfb78a75a29b34af0bacf7c
- SHA1
  
  335ceb110d946f182c22d34400a0805284dd45d6
- SHA256
  
  4c0709a9cefb7821f2664828c9bdbdfa04201f75861df825a201a0be013fa3e3
- SHA512
  
  9ab8d031a393e2e56bcc70e8295bbc08675d61429e6a39144ecb33bd89196e699d891a1fa2237131bef54272233dd9a71300f55e9c1c1eeb036f119db553e0c1
- SSDEEP
  
  768:LaFq5EYYNuZNe3moyGali+xP1Ux+v/RN:LaEzNXCXyRJxk6j
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pub4smokeloader

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan