smokeloader | bd0d826c971936384c3cd2cc4d7b52eea80c85a280c5bc4986c37dedbd212d52 | Triage

Sharing

General

Target

bd0d826c971936384c3cd2cc4d7b52eea80c85a280c5bc4986c37dedbd212d52
Size

232KB
Sample

241106-m8gs8syjfw
MD5

d21cd371ebcfb168c7e321c9104f2526
SHA1

3e7379803b0e8e9378e845c2764164bea32b4d77
SHA256

bd0d826c971936384c3cd2cc4d7b52eea80c85a280c5bc4986c37dedbd212d52
SHA512

8d2055db7abbb5c0f1bf5065a0ab802cef0f8ad5fcb07ab3aedc3b5d67ac27545e42bfbbeaced1047ff99fdec4834999442e99d563f0750feea9ec27ba59159c
SSDEEP

6144:vKlCLuJOl70o4w0fOPb7ITsqXigaXwVfh:vKlCLuJM70oYGz7R

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  bd0d826c971936384c3cd2cc4d7b52eea80c85a280c5bc4986c37dedbd212d52
- Size
  
  232KB
- MD5
  
  d21cd371ebcfb168c7e321c9104f2526
- SHA1
  
  3e7379803b0e8e9378e845c2764164bea32b4d77
- SHA256
  
  bd0d826c971936384c3cd2cc4d7b52eea80c85a280c5bc4986c37dedbd212d52
- SHA512
  
  8d2055db7abbb5c0f1bf5065a0ab802cef0f8ad5fcb07ab3aedc3b5d67ac27545e42bfbbeaced1047ff99fdec4834999442e99d563f0750feea9ec27ba59159c
- SSDEEP
  
  6144:vKlCLuJOl70o4w0fOPb7ITsqXigaXwVfh:vKlCLuJM70oYGz7R
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan