smokeloader | e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3f | Triage

Sharing

General

Target

e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3fN.exe
Size

251KB
Sample

241118-12g3bawdph
MD5

663db4a468507846b6efe47b08353230
SHA1

4dbb9537bf95eb4bda5abc56faadfabae6697da9
SHA256

e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3f
SHA512

90a0ac8282e25d1606e0be0acf35a331df147940b31f8c4c8a0d84c50493e36b12f7a2f85e7a6cbd89aeddd3ab9c093d3fcc1df7534b91de4fc91d461b6edb6a
SSDEEP

3072:9UfwTzccjEXIh2bBhQ4EDEFBwOmZNx9TQ5xHE94ztlW:+CzcTXnBhgDJOeR9Ev

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3fN.exe
- Size
  
  251KB
- MD5
  
  663db4a468507846b6efe47b08353230
- SHA1
  
  4dbb9537bf95eb4bda5abc56faadfabae6697da9
- SHA256
  
  e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3f
- SHA512
  
  90a0ac8282e25d1606e0be0acf35a331df147940b31f8c4c8a0d84c50493e36b12f7a2f85e7a6cbd89aeddd3ab9c093d3fcc1df7534b91de4fc91d461b6edb6a
- SSDEEP
  
  3072:9UfwTzccjEXIh2bBhQ4EDEFBwOmZNx9TQ5xHE94ztlW:+CzcTXnBhgDJOeR9Ev
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan