smokeloader | 1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45 | Triage

Sharing

General

Target

1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45.exe
Size

228KB
Sample

240919-bg9t6asgpe
MD5

85e148bd1d422ce970d87628fbf351ea
SHA1

e1ee87938cd159916e904980aff9b031637d30c0
SHA256

1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45
SHA512

163805ea52499e694c9e7767aadbea6004950f43a3d72459fbd8bc1b084273e252aa6546ae74a96f36efad5fa7fb60db9f36d4af90d39885e31e88d613ae891f
SSDEEP

3072:WdoLovr0yE03B3Kq16flK8sAQ18s7TVyC5qKuAYcuetO9Emf/n:hLovWAZKq14l5sAQCAYcL6EmHn

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45.exe
- Size
  
  228KB
- MD5
  
  85e148bd1d422ce970d87628fbf351ea
- SHA1
  
  e1ee87938cd159916e904980aff9b031637d30c0
- SHA256
  
  1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45
- SHA512
  
  163805ea52499e694c9e7767aadbea6004950f43a3d72459fbd8bc1b084273e252aa6546ae74a96f36efad5fa7fb60db9f36d4af90d39885e31e88d613ae891f
- SSDEEP
  
  3072:WdoLovr0yE03B3Kq16flK8sAQ18s7TVyC5qKuAYcuetO9Emf/n:hLovWAZKq14l5sAQCAYcL6EmHn
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan