smokeloader | 2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844 | Triage

Sharing

General

Target

eead7a529f768cd0a74a639ff806357c.exe
Size

361KB
Sample

241001-qhsdts1ekm
MD5

eead7a529f768cd0a74a639ff806357c
SHA1

5fea9c1f649f81dfca7f19af1cabc8aab2b01829
SHA256

2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844
SHA512

dd28fb4dcbba20b72e7fb36c2d947a99a8dffe76d52460d52143992aa98bf0c7ee41cfa9e59fb7d0a7ca3c598b0924254e9764168f5f8031f3bb920f60d562e5
SSDEEP

6144:o1JYtwjCacpD0fbtNorAJoKURDOT42P12YO5LqxuGG8eskEGtwc:Ui2jCacpofbtNRJoSHbkGVGtw

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  eead7a529f768cd0a74a639ff806357c.exe
- Size
  
  361KB
- MD5
  
  eead7a529f768cd0a74a639ff806357c
- SHA1
  
  5fea9c1f649f81dfca7f19af1cabc8aab2b01829
- SHA256
  
  2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844
- SHA512
  
  dd28fb4dcbba20b72e7fb36c2d947a99a8dffe76d52460d52143992aa98bf0c7ee41cfa9e59fb7d0a7ca3c598b0924254e9764168f5f8031f3bb920f60d562e5
- SSDEEP
  
  6144:o1JYtwjCacpD0fbtNorAJoKURDOT42P12YO5LqxuGG8eskEGtwc:Ui2jCacpofbtNRJoSHbkGVGtw
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan