smokeloader | 092dcb3b3fee1d60711c364306806d54d51a5a7cbe147bea11e44d7f442b0c77 | Triage

Sharing

General

Target

1688-4-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

240925-hsnjma1frk
MD5

7a1a52fc43343635bb02f5a0a45cedbb
SHA1

d562b0ec4701a9382e374d6f21ad5c156056d3d6
SHA256

092dcb3b3fee1d60711c364306806d54d51a5a7cbe147bea11e44d7f442b0c77
SHA512

4c23057b9dccd65bd92234d96902d7b54236595c44e9ed4632d49fc2b46e109d583783d8c3e11ede14962c5ec009f5a6f89698c40640ce2eff395cc9973fd5d6
SSDEEP

768:CNRArRrmh8nz5y+bgsDF5I0haNLj1PokgJ4T:CNRAdlnzVF20MBj1PgJ4T

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  1688-4-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  7a1a52fc43343635bb02f5a0a45cedbb
- SHA1
  
  d562b0ec4701a9382e374d6f21ad5c156056d3d6
- SHA256
  
  092dcb3b3fee1d60711c364306806d54d51a5a7cbe147bea11e44d7f442b0c77
- SHA512
  
  4c23057b9dccd65bd92234d96902d7b54236595c44e9ed4632d49fc2b46e109d583783d8c3e11ede14962c5ec009f5a6f89698c40640ce2eff395cc9973fd5d6
- SSDEEP
  
  768:CNRArRrmh8nz5y+bgsDF5I0haNLj1PokgJ4T:CNRAdlnzVF20MBj1PgJ4T
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pub1smokeloader

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan