smokeloader | 89f43c4defb025ce9a65484aacdfbe49d01113952842b9aa4bfe9cf5d65d862a | Triage

Sharing

General

Target

89f43c4defb025ce9a65484aacdfbe49d01113952842b9aa4bfe9cf5d65d862a
Size

373KB
Sample

241103-rsp7wswekc
MD5

d59547e7f9927d4cd8840e54194b03cd
SHA1

c0f6915f739cabf56816ab4d2fad45928dfda6a9
SHA256

89f43c4defb025ce9a65484aacdfbe49d01113952842b9aa4bfe9cf5d65d862a
SHA512

950ffdab801e5ae18501d3fd2a3660d8673cda7045633edc77d78596ae673cb5983462323707fa7fcc36a34859a3c0c9e7739309b54c260819a4c63188edf0e0
SSDEEP

6144:iXCLUc8AbENbQGvMSp86DHye69nnZKjaFFB2h87RMcwnT:iXCAc8yVsMSvye6nnsjGQ+t8

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  89f43c4defb025ce9a65484aacdfbe49d01113952842b9aa4bfe9cf5d65d862a
- Size
  
  373KB
- MD5
  
  d59547e7f9927d4cd8840e54194b03cd
- SHA1
  
  c0f6915f739cabf56816ab4d2fad45928dfda6a9
- SHA256
  
  89f43c4defb025ce9a65484aacdfbe49d01113952842b9aa4bfe9cf5d65d862a
- SHA512
  
  950ffdab801e5ae18501d3fd2a3660d8673cda7045633edc77d78596ae673cb5983462323707fa7fcc36a34859a3c0c9e7739309b54c260819a4c63188edf0e0
- SSDEEP
  
  6144:iXCLUc8AbENbQGvMSp86DHye69nnZKjaFFB2h87RMcwnT:iXCAc8yVsMSvye6nnsjGQ+t8
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan