smokeloader | 67042e2eb5307d927d17c8c7b10d4ca2ad1dbac25d7f46a128ac660f40fbfed6 | Triage

Sharing

General

Target

67042e2eb5307d927d17c8c7b10d4ca2ad1dbac25d7f46a128ac660f40fbfed6
Size

226KB
Sample

241104-2qjmfaygjc
MD5

0b4a45c497943ed6364f93b216d2e673
SHA1

24547e9d38e6ecfd6bdaeab7e2c06a925463b24d
SHA256

67042e2eb5307d927d17c8c7b10d4ca2ad1dbac25d7f46a128ac660f40fbfed6
SHA512

2541579d41a3c7debcb45ce4ff69f898ba2395a05b3b05b2610ebc290c0b06263670633cfdab015a61d81d3b1e7048fab52e7cbaf690a742b955f3f4b165f32f
SSDEEP

3072:52c4fTolkkp4C2kTQ693rm5dkrMURSqWttc:ocJkkS+Q7LUUB

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  67042e2eb5307d927d17c8c7b10d4ca2ad1dbac25d7f46a128ac660f40fbfed6
- Size
  
  226KB
- MD5
  
  0b4a45c497943ed6364f93b216d2e673
- SHA1
  
  24547e9d38e6ecfd6bdaeab7e2c06a925463b24d
- SHA256
  
  67042e2eb5307d927d17c8c7b10d4ca2ad1dbac25d7f46a128ac660f40fbfed6
- SHA512
  
  2541579d41a3c7debcb45ce4ff69f898ba2395a05b3b05b2610ebc290c0b06263670633cfdab015a61d81d3b1e7048fab52e7cbaf690a742b955f3f4b165f32f
- SSDEEP
  
  3072:52c4fTolkkp4C2kTQ693rm5dkrMURSqWttc:ocJkkS+Q7LUUB
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan