smokeloader | b67593dbba8113692794b340bcbf91a8f6ecd17afa359619cfb8c9d7a038ee8a | Triage

Sharing

General

Target

b67593dbba8113692794b340bcbf91a8f6ecd17afa359619cfb8c9d7a038ee8a
Size

169KB
Sample

241108-yt39gayejc
MD5

3b1fe17ff6536027d707a9071eeaa21d
SHA1

e560fa642c4428c5d94b17a4c9eb64304c5dd7c6
SHA256

b67593dbba8113692794b340bcbf91a8f6ecd17afa359619cfb8c9d7a038ee8a
SHA512

658c6502c3bd83c8b8f6e8067bd2a45a7dec0a009660cce1cda5cb49076383bfa09edacf92c2d78465b2a0f3e8b17918ce646822f4583a6f4cce3c8fb802eb7a
SSDEEP

3072:Nkz+aTBL5hE702YIzSZ0ZZoVnWBGAOlYVlDCgIhQmnunTLBflE3amYLahG1:Ne+sdhm0jGjQ4BPllaQmneNf5LIy

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  e5147ae13310b2b93da17d2800a21956788671c907f7dd19a3918c0b9fcc051b.exe
- Size
  
  300KB
- MD5
  
  092bc2c227db1bb7bc32a047092d27c9
- SHA1
  
  b5e671d3e050c5f27ab45443047619bd3eed28bf
- SHA256
  
  e5147ae13310b2b93da17d2800a21956788671c907f7dd19a3918c0b9fcc051b
- SHA512
  
  7343571a104619a315823f818a67eeed32b2ae7834b3c06de1671de18d09df103c8db7e9c7d41e5f1dd632a0cea53e446c94816ce978ff876bb8edc35c2d3f4c
- SSDEEP
  
  3072:Zov4S9LXS589ZUkA2JL9CKEUDeb44td76gZNP1lV09KSDxNlfEd542:+vDL00ZZiKEUDedtd+oNPsDbgJ
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan