smokeloader | 6a9bfff515d84d4874d6827b77e6305cc9dc7b62bbedc2e1d2ad7c26ff43d37c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2252-4-0x0000000000400000-0x000000000040B000-memory.dmp
Size

44KB
Sample

241023-nbrgvaydrq
MD5

6ede6c8231cd06ea4e30b0b076dd6aba
SHA1

2dd4669beae2c95799559454951dafd25cb36258
SHA256

6a9bfff515d84d4874d6827b77e6305cc9dc7b62bbedc2e1d2ad7c26ff43d37c
SHA512

32c93ed80fbed9756cea3948647d94b0428c9e61e0618a7e6559b12161a71368ca804afc6014debd125ee6c2150acdf0babfd2d79608d0b031c3d56e230c5264
SSDEEP

768:cG9GioucgLeFPFssvqYgMEZEVRsulWudZfDGN8J0cGyj0l:c2ouzeF/vJnjVRssPjf5PGJl

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  2252-4-0x0000000000400000-0x000000000040B000-memory.dmp
- Size
  
  44KB
- MD5
  
  6ede6c8231cd06ea4e30b0b076dd6aba
- SHA1
  
  2dd4669beae2c95799559454951dafd25cb36258
- SHA256
  
  6a9bfff515d84d4874d6827b77e6305cc9dc7b62bbedc2e1d2ad7c26ff43d37c
- SHA512
  
  32c93ed80fbed9756cea3948647d94b0428c9e61e0618a7e6559b12161a71368ca804afc6014debd125ee6c2150acdf0babfd2d79608d0b031c3d56e230c5264
- SSDEEP
  
  768:cG9GioucgLeFPFssvqYgMEZEVRsulWudZfDGN8J0cGyj0l:c2ouzeF/vJnjVRssPjf5PGJl
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pub3smokeloader

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan