smokeloader | 60c841b59d931be463ced23bf313e36bbddaa9bed30003e72a865a19be38ebaf | Triage

Sharing

General

Target

60c841b59d931be463ced23bf313e36bbddaa9bed30003e72a865a19be38ebaf
Size

224KB
Sample

240916-1mcjaa1fjq
MD5

c090b864111dc7fe3bf6cd221233e78a
SHA1

afa645c07783badc5fb432c61ec54094669f137a
SHA256

60c841b59d931be463ced23bf313e36bbddaa9bed30003e72a865a19be38ebaf
SHA512

527d4be8d2b972b508d27e21a8f1b2fd8229ab1be30d87054f9ccaa43cb049d7c97bddbacb0f6815ca014ee4dcc049ad8da39e8ffdfcb56e1d3aac9eef6984ad
SSDEEP

3072:cLiOOD8sl27vyy1/vcRu8IcqKwKBN05ZTcP9dg0y/RkvmQvM:cLiOFCy1/cucATIIT5k+L

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  60c841b59d931be463ced23bf313e36bbddaa9bed30003e72a865a19be38ebaf
- Size
  
  224KB
- MD5
  
  c090b864111dc7fe3bf6cd221233e78a
- SHA1
  
  afa645c07783badc5fb432c61ec54094669f137a
- SHA256
  
  60c841b59d931be463ced23bf313e36bbddaa9bed30003e72a865a19be38ebaf
- SHA512
  
  527d4be8d2b972b508d27e21a8f1b2fd8229ab1be30d87054f9ccaa43cb049d7c97bddbacb0f6815ca014ee4dcc049ad8da39e8ffdfcb56e1d3aac9eef6984ad
- SSDEEP
  
  3072:cLiOOD8sl27vyy1/vcRu8IcqKwKBN05ZTcP9dg0y/RkvmQvM:cLiOFCy1/cucATIIT5k+L
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan