smokeloader | ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9 | Triage

Sharing

General

Target

ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9
Size

228KB
Sample

240920-zkjn5sxdlr
MD5

96410cb83b262dabb95608c6c26c5233
SHA1

9a449b100aa5de4f3dcb8236007ac0aa7a27f00b
SHA256

ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9
SHA512

a9e4e1faa9c4c9ff1b6d4a88be79273936347d86c05ec48afb9889d58d8a7d824f7e3b1c425c09f85cab5d1b64c0e58db8ec2410d1266ca80d05d08f1e75dbe4
SSDEEP

3072:pLoLBpGnKY6VuhizbFRIZ0RMsP7Jo35oCT5+aFVZLwUVZ/csXot4W:pLovWlxhogZBPm

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9
- Size
  
  228KB
- MD5
  
  96410cb83b262dabb95608c6c26c5233
- SHA1
  
  9a449b100aa5de4f3dcb8236007ac0aa7a27f00b
- SHA256
  
  ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9
- SHA512
  
  a9e4e1faa9c4c9ff1b6d4a88be79273936347d86c05ec48afb9889d58d8a7d824f7e3b1c425c09f85cab5d1b64c0e58db8ec2410d1266ca80d05d08f1e75dbe4
- SSDEEP
  
  3072:pLoLBpGnKY6VuhizbFRIZ0RMsP7Jo35oCT5+aFVZLwUVZ/csXot4W:pLovWlxhogZBPm
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan