smokeloader | 4942ff94e613e09ebaada37b5d61a9b08459fcef987303c8dce1fd10868825ac | Triage

Sharing

General

Target

5d99d66ef42ec43af05b9304aebefdb6.exe
Size

387KB
Sample

241003-z959faxdrr
MD5

5d99d66ef42ec43af05b9304aebefdb6
SHA1

b90f71e96df4a0d654aaab1fdfe2845c8dcb8032
SHA256

4942ff94e613e09ebaada37b5d61a9b08459fcef987303c8dce1fd10868825ac
SHA512

a79ec46d0a34adeac048fe3dff42f60aa08f94ad8ad6862d61c18ddc5a1bcb8b4a2f83f21e41c49d56291b7eb50f6aae1a751dbe8f7d9f1a6fbdbdd02902c7d5
SSDEEP

6144:7IXTv/hzKeX7nJbSN8jMidyytvXOzwgKlbG6yiWTs:ynhzKeLnJbSN8l4cPOzwgKlt1u

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  5d99d66ef42ec43af05b9304aebefdb6.exe
- Size
  
  387KB
- MD5
  
  5d99d66ef42ec43af05b9304aebefdb6
- SHA1
  
  b90f71e96df4a0d654aaab1fdfe2845c8dcb8032
- SHA256
  
  4942ff94e613e09ebaada37b5d61a9b08459fcef987303c8dce1fd10868825ac
- SHA512
  
  a79ec46d0a34adeac048fe3dff42f60aa08f94ad8ad6862d61c18ddc5a1bcb8b4a2f83f21e41c49d56291b7eb50f6aae1a751dbe8f7d9f1a6fbdbdd02902c7d5
- SSDEEP
  
  6144:7IXTv/hzKeX7nJbSN8jMidyytvXOzwgKlbG6yiWTs:ynhzKeLnJbSN8l4cPOzwgKlt1u
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan