smokeloader | 44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91 | Triage

Sharing

General

Target

44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91.exe
Size

367KB
Sample

241021-blfrwa1cqc
MD5

8f7e3fa4b507ef8114bd09c4c39b40ab
SHA1

79024e1bb20fa1d46b7b135c230010c2720d57e6
SHA256

44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91
SHA512

88249e6c3dac9f08988772e1e6ff6a9703772c164001680865cff43f87531c358b6e6797ee329fb7a7c2f4af5b8aacc52d57f3503dfbc00ab228548be21a6d84
SSDEEP

6144:iJlLY7RbNJFm5JHdf2x/B+Q+FzLk41BFGMtwx+7sVUIHf:ircRbAOx5+/FfkXOG

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91.exe
- Size
  
  367KB
- MD5
  
  8f7e3fa4b507ef8114bd09c4c39b40ab
- SHA1
  
  79024e1bb20fa1d46b7b135c230010c2720d57e6
- SHA256
  
  44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91
- SHA512
  
  88249e6c3dac9f08988772e1e6ff6a9703772c164001680865cff43f87531c358b6e6797ee329fb7a7c2f4af5b8aacc52d57f3503dfbc00ab228548be21a6d84
- SSDEEP
  
  6144:iJlLY7RbNJFm5JHdf2x/B+Q+FzLk41BFGMtwx+7sVUIHf:ircRbAOx5+/FfkXOG
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan