smokeloader | fa7a8268e4e1f626806c785b6db0a7b11b7df57ac19e1a63218cbbfd741470e0 | Triage

Sharing

General

Target

fa7a8268e4e1f626806c785b6db0a7b11b7df57ac19e1a63218cbbfd741470e0
Size

40KB
Sample

241021-f3q2dssepp
MD5

96a304de083d6ad5724b444a1de440a7
SHA1

82ac735690e16fd8aa08e9dd20bcac341a804e0e
SHA256

fa7a8268e4e1f626806c785b6db0a7b11b7df57ac19e1a63218cbbfd741470e0
SHA512

3ca87b1605b570e1060aa65910ccfae877c54e8fa63398f36cbdb733f47f67d52df07bd0e071b518f41e0841c24968998b5f7b3d56ac645b62022d7b9bdfb601
SSDEEP

768:cG9Gio1cg1eFPFssvqYgMEZEVRsulWudZfDGN8J0cGyj0l:c2o1NeF/vJnjVRssPjf5PGJl

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  fa7a8268e4e1f626806c785b6db0a7b11b7df57ac19e1a63218cbbfd741470e0
- Size
  
  40KB
- MD5
  
  96a304de083d6ad5724b444a1de440a7
- SHA1
  
  82ac735690e16fd8aa08e9dd20bcac341a804e0e
- SHA256
  
  fa7a8268e4e1f626806c785b6db0a7b11b7df57ac19e1a63218cbbfd741470e0
- SHA512
  
  3ca87b1605b570e1060aa65910ccfae877c54e8fa63398f36cbdb733f47f67d52df07bd0e071b518f41e0841c24968998b5f7b3d56ac645b62022d7b9bdfb601
- SSDEEP
  
  768:cG9Gio1cg1eFPFssvqYgMEZEVRsulWudZfDGN8J0cGyj0l:c2o1NeF/vJnjVRssPjf5PGJl
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan