smokeloader | e6d90fe0502b181ce4bc9454592569dd809bb61119b7dd718f18018db3444376 | Triage

Sharing

General

Target

e6d90fe0502b181ce4bc9454592569dd809bb61119b7dd718f18018db3444376
Size

214KB
Sample

241104-n8cpyszelm
MD5

05e554119acb1947833d288d2984c5be
SHA1

f4330f12a27a309f9546afc3ce823b492d50ba11
SHA256

e6d90fe0502b181ce4bc9454592569dd809bb61119b7dd718f18018db3444376
SHA512

2003dd9ee9bde51478bc8a53d6c0fb7cf62db058d22e6ec2bbeec6ec11066a6596bee0c5e95925a528d7fd78cdc929c8feabc5da3b925520f5d34222e6bfdba2
SSDEEP

3072:CrybLZMemmOgdmCBj6SJfD8ayFz5aUMFW91:N65mTYejHaaU1

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  e6d90fe0502b181ce4bc9454592569dd809bb61119b7dd718f18018db3444376
- Size
  
  214KB
- MD5
  
  05e554119acb1947833d288d2984c5be
- SHA1
  
  f4330f12a27a309f9546afc3ce823b492d50ba11
- SHA256
  
  e6d90fe0502b181ce4bc9454592569dd809bb61119b7dd718f18018db3444376
- SHA512
  
  2003dd9ee9bde51478bc8a53d6c0fb7cf62db058d22e6ec2bbeec6ec11066a6596bee0c5e95925a528d7fd78cdc929c8feabc5da3b925520f5d34222e6bfdba2
- SSDEEP
  
  3072:CrybLZMemmOgdmCBj6SJfD8ayFz5aUMFW91:N65mTYejHaaU1
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan