smokeloader | 9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da | Triage

Sharing

General

Target

9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da.exe
Size

144KB
Sample

241122-st556stkgz
MD5

8ad2bfb643efdd7b8d0f2387f5d9f763
SHA1

002f6c2f25701d8fc2936b3cb628a2f36c11b58c
SHA256

9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da
SHA512

e70a26a0b631cf3a65749e8a0b5e59ebfd3595c063a25e06e91572155c066b8276109203fd14f61e131b75134a0160bdf19a5f07319a02345b6ce07c80303e60
SSDEEP

1536:Uk0JAbV7srPwPhk28mcL4Y/PKOMarYXUIflChgBM1qjl0O8sYc5WOmQjxkxKIj:UnuxaQ8/tHhIfl0gi1I0MYc5W86

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da.exe
- Size
  
  144KB
- MD5
  
  8ad2bfb643efdd7b8d0f2387f5d9f763
- SHA1
  
  002f6c2f25701d8fc2936b3cb628a2f36c11b58c
- SHA256
  
  9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da
- SHA512
  
  e70a26a0b631cf3a65749e8a0b5e59ebfd3595c063a25e06e91572155c066b8276109203fd14f61e131b75134a0160bdf19a5f07319a02345b6ce07c80303e60
- SSDEEP
  
  1536:Uk0JAbV7srPwPhk28mcL4Y/PKOMarYXUIflChgBM1qjl0O8sYc5WOmQjxkxKIj:UnuxaQ8/tHhIfl0gi1I0MYc5W86
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan