smokeloader | 0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b | Triage

Sharing

General

Target

0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b
Size

228KB
Sample

240919-w1fewashpg
MD5

592956e039cd08f94d1512a07c739e8b
SHA1

e5abddc156d45d37a39b229c033b81027d7097d1
SHA256

0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b
SHA512

a66c223ca03bb1e4b574b1e3cce923cfea845d69deb8d32e8c66a6907d74873d5b9bf91f78f173a14fc7899a949794e4ef1c62b559b9d371ec38ceeb12d8bf0f
SSDEEP

3072:NLpJU+quD+6N3yD7Dbv1MjYg+x5kCT5+ar9ewy92cEXot4W:NLpJU+quhy/Db95vSL

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b
- Size
  
  228KB
- MD5
  
  592956e039cd08f94d1512a07c739e8b
- SHA1
  
  e5abddc156d45d37a39b229c033b81027d7097d1
- SHA256
  
  0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b
- SHA512
  
  a66c223ca03bb1e4b574b1e3cce923cfea845d69deb8d32e8c66a6907d74873d5b9bf91f78f173a14fc7899a949794e4ef1c62b559b9d371ec38ceeb12d8bf0f
- SSDEEP
  
  3072:NLpJU+quD+6N3yD7Dbv1MjYg+x5kCT5+ar9ewy92cEXot4W:NLpJU+quhy/Db95vSL
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan