smokeloader | 67825ff4d1324587b2da2ee15ef234d04614db834eafe76225fbeba1266898ef | Triage

Sharing

General

Target

67825ff4d1324587b2da2ee15ef234d04614db834eafe76225fbeba1266898ef
Size

182KB
Sample

241108-2h1wrazrfv
MD5

1a0dd17e7931a344d630e2b74017750f
SHA1

cda69db7acd6b18a531a7951795dce98e7d61e27
SHA256

67825ff4d1324587b2da2ee15ef234d04614db834eafe76225fbeba1266898ef
SHA512

b741511f8470dacae52274f5b14ec80ecb87bc0d8b711212f0accd7bb6c2dd95ed59bc31f351ff7873d780d5fb250ff4d297a9e972d9adef0ebbdf40e41354a3
SSDEEP

3072:EYuLsetrKNf6zrM5Lw4hKpMFsEIV4JWrxpzbgqruXhs7sxkgaBChU+k2:EYuLs0sf6z+wiKQuzbgwu6Qigak

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  67825ff4d1324587b2da2ee15ef234d04614db834eafe76225fbeba1266898ef
- Size
  
  182KB
- MD5
  
  1a0dd17e7931a344d630e2b74017750f
- SHA1
  
  cda69db7acd6b18a531a7951795dce98e7d61e27
- SHA256
  
  67825ff4d1324587b2da2ee15ef234d04614db834eafe76225fbeba1266898ef
- SHA512
  
  b741511f8470dacae52274f5b14ec80ecb87bc0d8b711212f0accd7bb6c2dd95ed59bc31f351ff7873d780d5fb250ff4d297a9e972d9adef0ebbdf40e41354a3
- SSDEEP
  
  3072:EYuLsetrKNf6zrM5Lw4hKpMFsEIV4JWrxpzbgqruXhs7sxkgaBChU+k2:EYuLs0sf6z+wiKQuzbgwu6Qigak
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan