smokeloader | 0989916204259770d65679bdb4f7dd28f4cc04d74128812a1fec111e13448fe6 | Triage

Sharing

General

Target

file.exe
Size

262KB
Sample

240926-j5jxmszaqb
MD5

fe9a74e5d7a8eb7c09ebffc6f6a6128b
SHA1

ec15f80d746ef681ab34ea124b0704e98b67e05e
SHA256

0989916204259770d65679bdb4f7dd28f4cc04d74128812a1fec111e13448fe6
SHA512

891600569a7cd07e790498a08c661e4337b0f3404c52ed15dc207c0b83e8e3978cedce05f51abfb8f9653b73dbcca78df9ccb270f35fb74b743f353293597a54
SSDEEP

3072:+Lia71Cqt9fye3eFA0ZgnvQzoSm5ZgWyhM/5hYi327U5O5:+LiM1f9V3mtZ+vQzwgThM/5yU5

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  file.exe
- Size
  
  262KB
- MD5
  
  fe9a74e5d7a8eb7c09ebffc6f6a6128b
- SHA1
  
  ec15f80d746ef681ab34ea124b0704e98b67e05e
- SHA256
  
  0989916204259770d65679bdb4f7dd28f4cc04d74128812a1fec111e13448fe6
- SHA512
  
  891600569a7cd07e790498a08c661e4337b0f3404c52ed15dc207c0b83e8e3978cedce05f51abfb8f9653b73dbcca78df9ccb270f35fb74b743f353293597a54
- SSDEEP
  
  3072:+Lia71Cqt9fye3eFA0ZgnvQzoSm5ZgWyhM/5hYi327U5O5:+LiM1f9V3mtZ+vQzwgThM/5yU5
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan