smokeloader | 20d558def304d8b34ded9723c23ba3efce8ccb084521fd3c4f6fc9a72aa5998e | Triage

Sharing

General

Target

678535da9497b60d22bb742324909200
Size

230KB
Sample

241109-s3x6xsznaj
MD5

678535da9497b60d22bb742324909200
SHA1

e0554a5943a5d4254f98db55b177ab5f4b3ead8d
SHA256

20d558def304d8b34ded9723c23ba3efce8ccb084521fd3c4f6fc9a72aa5998e
SHA512

a86addf5c09cf780dbdf0ba6c18c0e11441c218c00aedce73c1232c01c5d3c6891c650a86d48cf1d59cd3f61dfc4358b20a6360a39bba51d2bb2b25e5ac8780f
SSDEEP

3072:kTB8wyMGF+estOgnLyc9faTycpMxZFgoRIbDfZ672iUbqMjSdadM/h3qpZa9uD6F:k8wk8JNB9kSFWbDx62q5dErwVfEz

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  678535da9497b60d22bb742324909200
- Size
  
  230KB
- MD5
  
  678535da9497b60d22bb742324909200
- SHA1
  
  e0554a5943a5d4254f98db55b177ab5f4b3ead8d
- SHA256
  
  20d558def304d8b34ded9723c23ba3efce8ccb084521fd3c4f6fc9a72aa5998e
- SHA512
  
  a86addf5c09cf780dbdf0ba6c18c0e11441c218c00aedce73c1232c01c5d3c6891c650a86d48cf1d59cd3f61dfc4358b20a6360a39bba51d2bb2b25e5ac8780f
- SSDEEP
  
  3072:kTB8wyMGF+estOgnLyc9faTycpMxZFgoRIbDfZ672iUbqMjSdadM/h3qpZa9uD6F:k8wk8JNB9kSFWbDx62q5dErwVfEz
Score

10^/10

smokeloader pub2 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoordiscoverytrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan