smokeloader | 444a1f454014e101380c9a72a3147999a393fb6c3e271d10396f6d63ff76d8eb | Triage

Sharing

General

Target

d1148304ea1f5eb378ade9eb02926b91.exe
Size

364KB
Sample

241023-h2l26azapl
MD5

d1148304ea1f5eb378ade9eb02926b91
SHA1

4fc4b5d798f2897169e6a8117b9b41bbda3141f5
SHA256

444a1f454014e101380c9a72a3147999a393fb6c3e271d10396f6d63ff76d8eb
SHA512

13f11529340f1eddace6d8b5aba3ae57dd4a53efef90f3cb50caf5b404eec0ffc7a389e7bbdc95d33a41a5c8415a2227fa6838bf933ccb065e15228927104139
SSDEEP

6144:rr9LCjcmxi2IAM4yAcvW9sD/llNjVAo6lYW9jz5G9:rhWjc2i0y4E/fAzt5e

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  d1148304ea1f5eb378ade9eb02926b91.exe
- Size
  
  364KB
- MD5
  
  d1148304ea1f5eb378ade9eb02926b91
- SHA1
  
  4fc4b5d798f2897169e6a8117b9b41bbda3141f5
- SHA256
  
  444a1f454014e101380c9a72a3147999a393fb6c3e271d10396f6d63ff76d8eb
- SHA512
  
  13f11529340f1eddace6d8b5aba3ae57dd4a53efef90f3cb50caf5b404eec0ffc7a389e7bbdc95d33a41a5c8415a2227fa6838bf933ccb065e15228927104139
- SSDEEP
  
  6144:rr9LCjcmxi2IAM4yAcvW9sD/llNjVAo6lYW9jz5G9:rhWjc2i0y4E/fAzt5e
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan