smokeloader | 662760a2fbd2fd17fbd916739bed6c9fbac199b8813e48c9de2fea086a214ec7 | Triage

Sharing

General

Target

662760a2fbd2fd17fbd916739bed6c9fbac199b8813e48c9de2fea086a214ec7.exe
Size

144KB
Sample

241124-kgwf7sskgy
MD5

3e51268ac326061f9af86e81d3ef544a
SHA1

7037cf7099dc31f3b21292804f6f94ea3342a494
SHA256

662760a2fbd2fd17fbd916739bed6c9fbac199b8813e48c9de2fea086a214ec7
SHA512

26728b449c4b91f943a5b927ea7e70f30c7f70ada5dcf357a24860e657bfe0131ed8ca1eafb3ca289824be097ba9b601f5b57ad6fe03e3569b821ca3fe22a9f4
SSDEEP

3072:tACY7QMEpchKEw1/fJzzRJh25AwhF8/Zy5LFzD:twFhKP5Jzz0/Wy5xzD

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  662760a2fbd2fd17fbd916739bed6c9fbac199b8813e48c9de2fea086a214ec7.exe
- Size
  
  144KB
- MD5
  
  3e51268ac326061f9af86e81d3ef544a
- SHA1
  
  7037cf7099dc31f3b21292804f6f94ea3342a494
- SHA256
  
  662760a2fbd2fd17fbd916739bed6c9fbac199b8813e48c9de2fea086a214ec7
- SHA512
  
  26728b449c4b91f943a5b927ea7e70f30c7f70ada5dcf357a24860e657bfe0131ed8ca1eafb3ca289824be097ba9b601f5b57ad6fe03e3569b821ca3fe22a9f4
- SSDEEP
  
  3072:tACY7QMEpchKEw1/fJzzRJh25AwhF8/Zy5LFzD:twFhKP5Jzz0/Wy5xzD
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan