smokeloader | e2a7f3f96c3d37c121939e293c68ed5a49d9c3a0ae30e646430e7c8f04338f40 | Triage

Sharing

General

Target

e2a7f3f96c3d37c121939e293c68ed5a49d9c3a0ae30e646430e7c8f04338f40.exe
Size

218KB
Sample

241009-rdlwxs1apb
MD5

506572dc9e0784a122652c792b6dbdc4
SHA1

891d36b5b100cd647d9c231ea6c36b26728ceea6
SHA256

e2a7f3f96c3d37c121939e293c68ed5a49d9c3a0ae30e646430e7c8f04338f40
SHA512

cf700aa3858e0e547562a3e41d388090d53330b6194e50729732db197bf82616e82592706a8daa5d0969d49acba548fdd869d05dad6da7151a58249291552662
SSDEEP

3072:LELgQvpKcUJTV5nEG2MfHdPwi548Ewv6ClhJNCA43/6o5E4CA43/6XoIE:LELgQvELJn79vTHRNvTotvT4

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  e2a7f3f96c3d37c121939e293c68ed5a49d9c3a0ae30e646430e7c8f04338f40.exe
- Size
  
  218KB
- MD5
  
  506572dc9e0784a122652c792b6dbdc4
- SHA1
  
  891d36b5b100cd647d9c231ea6c36b26728ceea6
- SHA256
  
  e2a7f3f96c3d37c121939e293c68ed5a49d9c3a0ae30e646430e7c8f04338f40
- SHA512
  
  cf700aa3858e0e547562a3e41d388090d53330b6194e50729732db197bf82616e82592706a8daa5d0969d49acba548fdd869d05dad6da7151a58249291552662
- SSDEEP
  
  3072:LELgQvpKcUJTV5nEG2MfHdPwi548Ewv6ClhJNCA43/6o5E4CA43/6XoIE:LELgQvELJn79vTHRNvTotvT4
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan