smokeloader | 59659fe4dcb56637074f278b26c0d61d9e38bd2ef260e7d0ff447e1668032dff | Triage

Sharing

General

Target

1408-3-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240925-gkkmbs1gmb
MD5

3e843a2bac4cb2496b64bf18e35d50b8
SHA1

71a60094f763690eda3f740a122cf7aad63ecc19
SHA256

59659fe4dcb56637074f278b26c0d61d9e38bd2ef260e7d0ff447e1668032dff
SHA512

587745d1793a60274faa00e09d0e7fa98086fd2caf7f5236ce9b51c19e0063e434aa8ebaf46004838dea67dc89138d0216e7c126ac0d01c2f96680a225f21aaa
SSDEEP

768:CNRAyL+nz5y+bgsDF5I0haNLj1PokgJ4T:CNRAxnzVF20MBj1PgJ4T

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  1408-3-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  3e843a2bac4cb2496b64bf18e35d50b8
- SHA1
  
  71a60094f763690eda3f740a122cf7aad63ecc19
- SHA256
  
  59659fe4dcb56637074f278b26c0d61d9e38bd2ef260e7d0ff447e1668032dff
- SHA512
  
  587745d1793a60274faa00e09d0e7fa98086fd2caf7f5236ce9b51c19e0063e434aa8ebaf46004838dea67dc89138d0216e7c126ac0d01c2f96680a225f21aaa
- SSDEEP
  
  768:CNRAyL+nz5y+bgsDF5I0haNLj1PokgJ4T:CNRAxnzVF20MBj1PgJ4T
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pub2smokeloader

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan