smokeloader | 3eac19601c2f51ab48c6f86dc4c06f9d1f37500f6a0d6bace668784dc3788c9b | Triage

Sharing

General

Target

3eac19601c2f51ab48c6f86dc4c06f9d1f37500f6a0d6bace668784dc3788c9b
Size

421KB
Sample

241020-zty57azdnh
MD5

16f27afc19b27c96a37db20e018f7878
SHA1

74e9ae404b8cd2b0aac9712817b65bc64b28bd78
SHA256

3eac19601c2f51ab48c6f86dc4c06f9d1f37500f6a0d6bace668784dc3788c9b
SHA512

21dafae871f54d41ac69c91fbccfc6cc5d69d180b28c6749d3d5e72eb6f4c7afa654c5890737c716f59ce0c3c22db5c72aea9bb96dd85d4e315d29bf72761f0e
SSDEEP

6144:q9Lm2kkdBG3ylPhFcQGzTN65OrV8jTrD/7sFj4:Oy2kk/plPhWQGzgOr6/rl

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  3eac19601c2f51ab48c6f86dc4c06f9d1f37500f6a0d6bace668784dc3788c9b
- Size
  
  421KB
- MD5
  
  16f27afc19b27c96a37db20e018f7878
- SHA1
  
  74e9ae404b8cd2b0aac9712817b65bc64b28bd78
- SHA256
  
  3eac19601c2f51ab48c6f86dc4c06f9d1f37500f6a0d6bace668784dc3788c9b
- SHA512
  
  21dafae871f54d41ac69c91fbccfc6cc5d69d180b28c6749d3d5e72eb6f4c7afa654c5890737c716f59ce0c3c22db5c72aea9bb96dd85d4e315d29bf72761f0e
- SSDEEP
  
  6144:q9Lm2kkdBG3ylPhFcQGzTN65OrV8jTrD/7sFj4:Oy2kk/plPhWQGzgOr6/rl
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan