smokeloader | 35bf9dfd223e02da2ee3d57ec493156787a3c2cecb8b655a583985a2f14cc6e3 | Triage

Sharing

General

Target

35bf9dfd223e02da2ee3d57ec493156787a3c2cecb8b655a583985a2f14cc6e3
Size

277KB
Sample

241027-nnjyjavlcr
MD5

ac6a932b599565bdc10acfecf938c41d
SHA1

9fec1f659f9fec54d920a0a73c66dfa99d80ef57
SHA256

35bf9dfd223e02da2ee3d57ec493156787a3c2cecb8b655a583985a2f14cc6e3
SHA512

d8e9f2c44aeb7634552af23a77757af41a50543ff7d5b4c620d9c4a19462d65d991dd19cb8e2063ca1424ef9206158c9fe74a1c63f84d1fe60fd347bdc314e5f
SSDEEP

3072:uKf5LPigdxK34S+wt79duyt4J5QJ1+ZtQXGKKXvHAddkxrj:/hLPiILSTBLRt4cuZtQ2Xvnrj

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  35bf9dfd223e02da2ee3d57ec493156787a3c2cecb8b655a583985a2f14cc6e3
- Size
  
  277KB
- MD5
  
  ac6a932b599565bdc10acfecf938c41d
- SHA1
  
  9fec1f659f9fec54d920a0a73c66dfa99d80ef57
- SHA256
  
  35bf9dfd223e02da2ee3d57ec493156787a3c2cecb8b655a583985a2f14cc6e3
- SHA512
  
  d8e9f2c44aeb7634552af23a77757af41a50543ff7d5b4c620d9c4a19462d65d991dd19cb8e2063ca1424ef9206158c9fe74a1c63f84d1fe60fd347bdc314e5f
- SSDEEP
  
  3072:uKf5LPigdxK34S+wt79duyt4J5QJ1+ZtQXGKKXvHAddkxrj:/hLPiILSTBLRt4cuZtQ2Xvnrj
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan