smokeloader | 5e76223b4ec53240790dbdb1a2937774f48094711ee0cf2a5906ffd8e727e519 | Triage

Sharing

General

Target

ddea2e8fdf71f225d8edebe0034e589f.exe
Size

421KB
Sample

241018-qlm9aayepc
MD5

ddea2e8fdf71f225d8edebe0034e589f
SHA1

b8c92917f1fe79d3595c7cdcd4c157eae69c7ba6
SHA256

5e76223b4ec53240790dbdb1a2937774f48094711ee0cf2a5906ffd8e727e519
SHA512

a924639de2b707d8e1aba9b7b5c1b2aa0cccb6e5e03513724cc0dd3049ebdc295d09b655f3fdb2c920de15a3847df99ded5e4a241af22d42ef43d61c88e3cb7e
SSDEEP

6144:C9L6WkBljkkvOqysCusnDXebpcOB3FyxMfb9ObhzQ5D/7sFj5:22WkBdhvOfuK+p/B3FyGbUbhQ5M

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  ddea2e8fdf71f225d8edebe0034e589f.exe
- Size
  
  421KB
- MD5
  
  ddea2e8fdf71f225d8edebe0034e589f
- SHA1
  
  b8c92917f1fe79d3595c7cdcd4c157eae69c7ba6
- SHA256
  
  5e76223b4ec53240790dbdb1a2937774f48094711ee0cf2a5906ffd8e727e519
- SHA512
  
  a924639de2b707d8e1aba9b7b5c1b2aa0cccb6e5e03513724cc0dd3049ebdc295d09b655f3fdb2c920de15a3847df99ded5e4a241af22d42ef43d61c88e3cb7e
- SSDEEP
  
  6144:C9L6WkBljkkvOqysCusnDXebpcOB3FyxMfb9ObhzQ5D/7sFj5:22WkBdhvOfuK+p/B3FyGbUbhQ5M
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan