smokeloader | 763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58 | Triage

Sharing

General

Target

763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
Size

282KB
Sample

240920-x2jpcstclk
MD5

0106f9ef84b12c021f6162c4cea235e5
SHA1

0f578daf6f177b51afc70773611f2c55b5d5ee8e
SHA256

763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
SHA512

83532853972d39a0c086de6d1b53e803103603f0a330d43d66eaa2ee2fd7a416399578502305fe1818e3147cd50944226b4b20eb86696139f1939003385b2d2f
SSDEEP

6144:xFOxlraju/txlKb0kNDBfFrX3HXYWgHe:6frDnkNRFT0H

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
- Size
  
  282KB
- MD5
  
  0106f9ef84b12c021f6162c4cea235e5
- SHA1
  
  0f578daf6f177b51afc70773611f2c55b5d5ee8e
- SHA256
  
  763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
- SHA512
  
  83532853972d39a0c086de6d1b53e803103603f0a330d43d66eaa2ee2fd7a416399578502305fe1818e3147cd50944226b4b20eb86696139f1939003385b2d2f
- SSDEEP
  
  6144:xFOxlraju/txlKb0kNDBfFrX3HXYWgHe:6frDnkNRFT0H
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan