smokeloader | d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f | Triage

Sharing

General

Target

d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f
Size

165KB
Sample

241105-3ba77atmbn
MD5

53028668f94337794046945928862a98
SHA1

9d6345d0524a7f8f9db20fbb24c6ec19fdbf4a7f
SHA256

d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f
SHA512

ba46370d68678773e117e3b9a8646e38291ebb063eebf902c27b2cb7f095de7ba336f1eae87b46e2e49ccd89231798e75f8b5a85b852282ee3154b283e19375a
SSDEEP

3072:srVMUCkS0t5EWeMHwhZoWC9sI5/DuT61m:UVMkS34HwhZU9sI5/

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f
- Size
  
  165KB
- MD5
  
  53028668f94337794046945928862a98
- SHA1
  
  9d6345d0524a7f8f9db20fbb24c6ec19fdbf4a7f
- SHA256
  
  d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f
- SHA512
  
  ba46370d68678773e117e3b9a8646e38291ebb063eebf902c27b2cb7f095de7ba336f1eae87b46e2e49ccd89231798e75f8b5a85b852282ee3154b283e19375a
- SSDEEP
  
  3072:srVMUCkS0t5EWeMHwhZoWC9sI5/DuT61m:UVMkS34HwhZU9sI5/
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan