smokeloader | f06fca211f3ee54ebd6f7c25820901219592e0736be09a260ae774f6806376bd | Triage

Sharing

General

Target

ee83fed4193c74b9726be2372212a536.exe
Size

214KB
Sample

240925-gnlc2ayenp
MD5

ee83fed4193c74b9726be2372212a536
SHA1

057d11d83e96c5332b090ee500d10e2e617c1434
SHA256

f06fca211f3ee54ebd6f7c25820901219592e0736be09a260ae774f6806376bd
SHA512

d802ea21dd6ce7e8fb7c9ef3d9b22689550a59bc92f6e68ff8dd495cf1887286904dceef4385632eeda060430cfa09abe111dcbe0c51fdde2457b8bbec59c780
SSDEEP

3072:ZOFL8HNl8bopbq1OjM5HA/qabpk3r+XdabhYesl5f1:aLqNl0opekjMBAxbpg+GhYF

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  ee83fed4193c74b9726be2372212a536.exe
- Size
  
  214KB
- MD5
  
  ee83fed4193c74b9726be2372212a536
- SHA1
  
  057d11d83e96c5332b090ee500d10e2e617c1434
- SHA256
  
  f06fca211f3ee54ebd6f7c25820901219592e0736be09a260ae774f6806376bd
- SHA512
  
  d802ea21dd6ce7e8fb7c9ef3d9b22689550a59bc92f6e68ff8dd495cf1887286904dceef4385632eeda060430cfa09abe111dcbe0c51fdde2457b8bbec59c780
- SSDEEP
  
  3072:ZOFL8HNl8bopbq1OjM5HA/qabpk3r+XdabhYesl5f1:aLqNl0opekjMBAxbpg+GhYF
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan