smokeloader | cb1d7d603c7c9e6ef4ba096fa4fc2165c8c9531f5a966fc0262fff8ec6a8aa3d | Triage

Sharing

General

Target

2ac0e22f00d606bdcb2595cd5fe9c6a7427596b2e31c3e6e306306e46516424aN.exe
Size

251KB
Sample

241112-gvjg1szkfk
MD5

224a04928d686ab2b0b448b7218cb75d
SHA1

3e78673655017d35c2a883067f6858b6d49c58cb
SHA256

cb1d7d603c7c9e6ef4ba096fa4fc2165c8c9531f5a966fc0262fff8ec6a8aa3d
SHA512

1e5a9fb93b4d8616e661c6975f3059ea0b03a0128edf30403389d7981b0618bfd366aaa85e608efbadcef963eb1131c6ace2c9fc9d534c2ace05f9fe64f0e104
SSDEEP

3072:eO/w0JkkDmQO7vB5YZzknf/STgRWfI5dp4zulWg:puvY2nf/I6E8l

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  2ac0e22f00d606bdcb2595cd5fe9c6a7427596b2e31c3e6e306306e46516424aN.exe
- Size
  
  251KB
- MD5
  
  224a04928d686ab2b0b448b7218cb75d
- SHA1
  
  3e78673655017d35c2a883067f6858b6d49c58cb
- SHA256
  
  cb1d7d603c7c9e6ef4ba096fa4fc2165c8c9531f5a966fc0262fff8ec6a8aa3d
- SHA512
  
  1e5a9fb93b4d8616e661c6975f3059ea0b03a0128edf30403389d7981b0618bfd366aaa85e608efbadcef963eb1131c6ace2c9fc9d534c2ace05f9fe64f0e104
- SSDEEP
  
  3072:eO/w0JkkDmQO7vB5YZzknf/STgRWfI5dp4zulWg:puvY2nf/I6E8l
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan