smokeloader | 5a9e6a5684dcc534e429359d81d83d3221665a87eafd584649de664d78ea434d | Triage

Sharing

General

Target

488732508af9714616bc7acf2d16f8f7.exe
Size

250KB
Sample

240924-3pegrssbjr
MD5

488732508af9714616bc7acf2d16f8f7
SHA1

166f88f419482b4f86a83c1b5041bde5275fc203
SHA256

5a9e6a5684dcc534e429359d81d83d3221665a87eafd584649de664d78ea434d
SHA512

62ecc730c5e7d6fddcf9303e05962a3f12ff2238cc0829d970f9aa9614147f6d81c5f789a07ab90af0b0705a4e9748caf501d446d62edf475f30da6136d463d0
SSDEEP

3072:GSLMNa0RHQqln0ZWeZh7mw6GJlSaN2n5bXVYz3M5aWZxZ2HVWaej:GSLMUIHQqlnQThqw6A4ayFYc5aWvYW

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  488732508af9714616bc7acf2d16f8f7.exe
- Size
  
  250KB
- MD5
  
  488732508af9714616bc7acf2d16f8f7
- SHA1
  
  166f88f419482b4f86a83c1b5041bde5275fc203
- SHA256
  
  5a9e6a5684dcc534e429359d81d83d3221665a87eafd584649de664d78ea434d
- SHA512
  
  62ecc730c5e7d6fddcf9303e05962a3f12ff2238cc0829d970f9aa9614147f6d81c5f789a07ab90af0b0705a4e9748caf501d446d62edf475f30da6136d463d0
- SSDEEP
  
  3072:GSLMNa0RHQqln0ZWeZh7mw6GJlSaN2n5bXVYz3M5aWZxZ2HVWaej:GSLMUIHQqlnQThqw6A4ayFYc5aWvYW
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan