smokeloader | e73e80fb1603b44dddfa19c5534a0bf4ab297b86f230d465ad0ef47a5b502996 | Triage

Sharing

General

Target

file.exe
Size

434KB
Sample

241016-ek8caa1gqg
MD5

69f47e61ff53249611bc6f1e9dc9e311
SHA1

957cc40f099525b217046b2aecce1562d2293827
SHA256

e73e80fb1603b44dddfa19c5534a0bf4ab297b86f230d465ad0ef47a5b502996
SHA512

c0bbd97f9fd0300f037689eb6da93f6b2a0f15da03d3350f937def0025338ee58ef157ebc0ac2af8a4cc2e9a96fcf1e44a16c80d11a974c3595b1a7063193986
SSDEEP

3072:nAXzvD1L2xljciSKSeVf9yoR0aJfZAUl7hLwZGsiIHAFeJs4YpLxdB5S+XTCLagL:0v1LulI2L9/JPphhwA8C4Y1K+DCL

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  file.exe
- Size
  
  434KB
- MD5
  
  69f47e61ff53249611bc6f1e9dc9e311
- SHA1
  
  957cc40f099525b217046b2aecce1562d2293827
- SHA256
  
  e73e80fb1603b44dddfa19c5534a0bf4ab297b86f230d465ad0ef47a5b502996
- SHA512
  
  c0bbd97f9fd0300f037689eb6da93f6b2a0f15da03d3350f937def0025338ee58ef157ebc0ac2af8a4cc2e9a96fcf1e44a16c80d11a974c3595b1a7063193986
- SSDEEP
  
  3072:nAXzvD1L2xljciSKSeVf9yoR0aJfZAUl7hLwZGsiIHAFeJs4YpLxdB5S+XTCLagL:0v1LulI2L9/JPphhwA8C4Y1K+DCL
Score

10^/10

smokeloader pub2 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoordiscoverytrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan