smokeloader | de74bd2a1d74bfb4f73d97a1e652c2a5bd778ae108df31ede4dd96950485118c | Triage

Sharing

General

Target

file.exe
Size

227KB
Sample

240918-spmg9syemn
MD5

a7d7d48f4a9bb7718ec17d11fba9cad8
SHA1

748fec11d5becea085af46e8197f42ac9a1e011b
SHA256

de74bd2a1d74bfb4f73d97a1e652c2a5bd778ae108df31ede4dd96950485118c
SHA512

98dda258e460098e79b9aaee795dbd0122f4541f9864fcf71d039ada426dff0fb8540725d779412eea52a6e66d45875665f11961fc7d7d3a2d2be061671e2e25
SSDEEP

3072:E8TNLO/NZxvu9aR10ocAbdyKA5RKuAYcug3JqO9Emf/n:E8TNLO/JiaRGGOAYc5Jq6EmHn

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  file.exe
- Size
  
  227KB
- MD5
  
  a7d7d48f4a9bb7718ec17d11fba9cad8
- SHA1
  
  748fec11d5becea085af46e8197f42ac9a1e011b
- SHA256
  
  de74bd2a1d74bfb4f73d97a1e652c2a5bd778ae108df31ede4dd96950485118c
- SHA512
  
  98dda258e460098e79b9aaee795dbd0122f4541f9864fcf71d039ada426dff0fb8540725d779412eea52a6e66d45875665f11961fc7d7d3a2d2be061671e2e25
- SSDEEP
  
  3072:E8TNLO/NZxvu9aR10ocAbdyKA5RKuAYcug3JqO9Emf/n:E8TNLO/JiaRGGOAYc5Jq6EmHn
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan