smokeloader | 35a64e204f70f9cf885232e505a456c0b4fe04d8c4f626ce57908280663bf4da | Triage

Sharing

General

Target

35a64e204f70f9cf885232e505a456c0b4fe04d8c4f626ce57908280663bf4da
Size

199KB
Sample

241104-xnq7aavkcx
MD5

9151df37c7e5cc1e0a682073e845bce3
SHA1

c3b9797cf2ecdea4eb4a547fac3dc14498df9eb5
SHA256

35a64e204f70f9cf885232e505a456c0b4fe04d8c4f626ce57908280663bf4da
SHA512

bc955664e15a02e38c2362fbeba80f274a4314b2f9b0091ad48c46485c2f9daa334f541cae76bd83fe3dd53a0fe0a860658f4d95f40c86b34fae9bacc6b25843
SSDEEP

1536:O7Zwdrbn30y5xDgBU3dH97mC0UGPapnHb36oeOl2pXHiYl1GKrm5XzAUp2PvXVha:n5RAC2PCnHjMOcplGKrm5XzcfWz2

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  35a64e204f70f9cf885232e505a456c0b4fe04d8c4f626ce57908280663bf4da
- Size
  
  199KB
- MD5
  
  9151df37c7e5cc1e0a682073e845bce3
- SHA1
  
  c3b9797cf2ecdea4eb4a547fac3dc14498df9eb5
- SHA256
  
  35a64e204f70f9cf885232e505a456c0b4fe04d8c4f626ce57908280663bf4da
- SHA512
  
  bc955664e15a02e38c2362fbeba80f274a4314b2f9b0091ad48c46485c2f9daa334f541cae76bd83fe3dd53a0fe0a860658f4d95f40c86b34fae9bacc6b25843
- SSDEEP
  
  1536:O7Zwdrbn30y5xDgBU3dH97mC0UGPapnHb36oeOl2pXHiYl1GKrm5XzAUp2PvXVha:n5RAC2PCnHjMOcplGKrm5XzcfWz2
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan