smokeloader | 07439f8a2adbe031b3b1f4bca85a8f8e99dfac6499ec6f9261d3c01d7a744bb6 | Triage

Sharing

General

Target

file.exe
Size

408KB
Sample

240925-lz3tnsscnc
MD5

51636e7775782f91df225f511b297f96
SHA1

bd338186079c1afd2750416c02b8650dbb6e463a
SHA256

07439f8a2adbe031b3b1f4bca85a8f8e99dfac6499ec6f9261d3c01d7a744bb6
SHA512

5f7e765cae4a507227caa97e68757d777c1af7b58482e669da5ee5adb200abbaaa05a079e5101feb370f7c8cbd56a99bdcdd1426d1b2d504758c9b6b41de0b79
SSDEEP

6144:D4SOx32ux+Zzo97tIDEjTI3+bOFNnPDqbc3Io/LTJWXvbMvquO52T3:BOxLx+Zk9paHNPDqbdo/LdWfbMCuYA

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  file.exe
- Size
  
  408KB
- MD5
  
  51636e7775782f91df225f511b297f96
- SHA1
  
  bd338186079c1afd2750416c02b8650dbb6e463a
- SHA256
  
  07439f8a2adbe031b3b1f4bca85a8f8e99dfac6499ec6f9261d3c01d7a744bb6
- SHA512
  
  5f7e765cae4a507227caa97e68757d777c1af7b58482e669da5ee5adb200abbaaa05a079e5101feb370f7c8cbd56a99bdcdd1426d1b2d504758c9b6b41de0b79
- SSDEEP
  
  6144:D4SOx32ux+Zzo97tIDEjTI3+bOFNnPDqbc3Io/LTJWXvbMvquO52T3:BOxLx+Zk9paHNPDqbdo/LdWfbMCuYA
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan