smokeloader | 053b3286a87f9473f97143dd7d94328be2ab2302831c48d5e8ba27a917022d73 | Triage

Sharing

General

Target

053b3286a87f9473f97143dd7d94328be2ab2302831c48d5e8ba27a917022d73
Size

217KB
Sample

241110-3hpn6awrcw
MD5

476fa6f10abf4be757e0fb00b18a5d39
SHA1

ddc117346207c94f95170a22ece5121bf7efd7e5
SHA256

053b3286a87f9473f97143dd7d94328be2ab2302831c48d5e8ba27a917022d73
SHA512

109ae4a0b30a1b90de2ad9d82004021404cdab3df389bea84f5d7e322387e6b62229bcebdbe0b9da352b9362c621197c3a39d63a3952452a54f09d167d513d0f
SSDEEP

3072:bPDm5LbqLlkIhXtr6W7PmAyXUG5+CCpmbxaVGhsZVggjcGkNIVqI/sxkgaBChCy2:bPDILEkIXtf4WCivV5b7ITsqXigad

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  053b3286a87f9473f97143dd7d94328be2ab2302831c48d5e8ba27a917022d73
- Size
  
  217KB
- MD5
  
  476fa6f10abf4be757e0fb00b18a5d39
- SHA1
  
  ddc117346207c94f95170a22ece5121bf7efd7e5
- SHA256
  
  053b3286a87f9473f97143dd7d94328be2ab2302831c48d5e8ba27a917022d73
- SHA512
  
  109ae4a0b30a1b90de2ad9d82004021404cdab3df389bea84f5d7e322387e6b62229bcebdbe0b9da352b9362c621197c3a39d63a3952452a54f09d167d513d0f
- SSDEEP
  
  3072:bPDm5LbqLlkIhXtr6W7PmAyXUG5+CCpmbxaVGhsZVggjcGkNIVqI/sxkgaBChCy2:bPDILEkIXtf4WCivV5b7ITsqXigad
Score

10^/10

smokeloader pub2 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoordiscoverytrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan