smokeloader | 2c9f66963c780d18d28cfff74c80af587c2d8e3efc7cf5cc92ace0c412e8138a | Triage

Sharing

General

Target

2c9f66963c780d18d28cfff74c80af587c2d8e3efc7cf5cc92ace0c412e8138a.exe
Size

178KB
Sample

240926-bqxaes1hrg
MD5

24fde2f8dcad756768d052ce63356058
SHA1

ddc5d43ed9caa6191286faccf9ba7c8aa87cd329
SHA256

2c9f66963c780d18d28cfff74c80af587c2d8e3efc7cf5cc92ace0c412e8138a
SHA512

e942635a1ebaaa8e4e054a114613ab1b31313553373593be89290f45ea2f24f28ed72b3ac1512aa50d9c5b13f40bbcd05680e1195f62399ea7038b79b9560bf0
SSDEEP

3072:yCLTSFLMX6R334jzPw/tzKaFkDI5WMhp:fLTSFC6R3ovMB/rj

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  2c9f66963c780d18d28cfff74c80af587c2d8e3efc7cf5cc92ace0c412e8138a.exe
- Size
  
  178KB
- MD5
  
  24fde2f8dcad756768d052ce63356058
- SHA1
  
  ddc5d43ed9caa6191286faccf9ba7c8aa87cd329
- SHA256
  
  2c9f66963c780d18d28cfff74c80af587c2d8e3efc7cf5cc92ace0c412e8138a
- SHA512
  
  e942635a1ebaaa8e4e054a114613ab1b31313553373593be89290f45ea2f24f28ed72b3ac1512aa50d9c5b13f40bbcd05680e1195f62399ea7038b79b9560bf0
- SSDEEP
  
  3072:yCLTSFLMX6R334jzPw/tzKaFkDI5WMhp:fLTSFC6R3ovMB/rj
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan