smokeloader | bb14b2dd013553484a21edb68aa115c8160b63642f73f9670c7ec392bd549eae | Triage

Sharing

General

Target

2672-2-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

241004-v2wb2s1dlb
MD5

b95639878b02502325238eaa650baf6b
SHA1

70ae950d0e75bacdf49764ed3a2351ab3a39c654
SHA256

bb14b2dd013553484a21edb68aa115c8160b63642f73f9670c7ec392bd549eae
SHA512

b6f1fee0756d99a5872fb1dc83ff6127289529ccf41a43480dacc4866cb577b700e71409efc461dcd0de6656e44f52881f594119a5555fe0d06c4ddac17c962d
SSDEEP

768:RR8yqBqJTIsSgISW9uM7/953mpdH5Yvos0tdB80Z1srmN:r8PeETftV53uV5Ygs0TBymN

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  2672-2-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  b95639878b02502325238eaa650baf6b
- SHA1
  
  70ae950d0e75bacdf49764ed3a2351ab3a39c654
- SHA256
  
  bb14b2dd013553484a21edb68aa115c8160b63642f73f9670c7ec392bd549eae
- SHA512
  
  b6f1fee0756d99a5872fb1dc83ff6127289529ccf41a43480dacc4866cb577b700e71409efc461dcd0de6656e44f52881f594119a5555fe0d06c4ddac17c962d
- SSDEEP
  
  768:RR8yqBqJTIsSgISW9uM7/953mpdH5Yvos0tdB80Z1srmN:r8PeETftV53uV5Ygs0TBymN
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pub2smokeloader

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan