smokeloader | 23fe00b216ce79013e1bc1f8b1afdf2492828b24593a53e57820861b23a888fb | Triage

Sharing

General

Target

23fe00b216ce79013e1bc1f8b1afdf2492828b24593a53e57820861b23a888fb.exe
Size

344KB
Sample

241122-zhbkravkgj
MD5

efe205c86b7e77dae68013046ed07b9d
SHA1

4841b6cc621db26e48dfdbeb20dc4af41f4059e3
SHA256

23fe00b216ce79013e1bc1f8b1afdf2492828b24593a53e57820861b23a888fb
SHA512

87f892cd9b5b32d97fdc59ff9b3a38beb306749197bd3c7b784520f0748cb39df33e1a892f75e3d300d75e5e6e8c50b84b2cea50f254e580fc0f78007f4c4e72
SSDEEP

6144:3GTdHe1fQioLRFHgPVbdFbVI7oMLUDxERQ9kXApG:3eafQ9AVHbVmoMqERYkwI

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  23fe00b216ce79013e1bc1f8b1afdf2492828b24593a53e57820861b23a888fb.exe
- Size
  
  344KB
- MD5
  
  efe205c86b7e77dae68013046ed07b9d
- SHA1
  
  4841b6cc621db26e48dfdbeb20dc4af41f4059e3
- SHA256
  
  23fe00b216ce79013e1bc1f8b1afdf2492828b24593a53e57820861b23a888fb
- SHA512
  
  87f892cd9b5b32d97fdc59ff9b3a38beb306749197bd3c7b784520f0748cb39df33e1a892f75e3d300d75e5e6e8c50b84b2cea50f254e580fc0f78007f4c4e72
- SSDEEP
  
  6144:3GTdHe1fQioLRFHgPVbdFbVI7oMLUDxERQ9kXApG:3eafQ9AVHbVmoMqERYkwI
Score

10^/10

smokeloader pub3 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoordiscoverytrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan