smokeloader | 686cd06053b27fc0e52175c2cb737d96057ae4d1423c6d28a973ad06ef7dfc59 | Triage

Sharing

General

Target

686cd06053b27fc0e52175c2cb737d96057ae4d1423c6d28a973ad06ef7dfc59N.exe
Size

37KB
Sample

241126-mtpkjatqdn
MD5

488e10c4bf1c69bd3c3febc76cbaaef0
SHA1

e3931127b61698a535d344b0bed6611788dce1ed
SHA256

686cd06053b27fc0e52175c2cb737d96057ae4d1423c6d28a973ad06ef7dfc59
SHA512

e476a284ddbad40619354074c4cbc3355d3e9fd14accc7f61fe1982e21b828950daefdada05c20aeda976c69c2f498051bbee20af2cb134044b38618194ffa9f
SSDEEP

768:jTbI92XQTvHXeSBDeecOdf8zRhLkw1JW0x:i4avV1esfYRtkU4w

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  686cd06053b27fc0e52175c2cb737d96057ae4d1423c6d28a973ad06ef7dfc59N.exe
- Size
  
  37KB
- MD5
  
  488e10c4bf1c69bd3c3febc76cbaaef0
- SHA1
  
  e3931127b61698a535d344b0bed6611788dce1ed
- SHA256
  
  686cd06053b27fc0e52175c2cb737d96057ae4d1423c6d28a973ad06ef7dfc59
- SHA512
  
  e476a284ddbad40619354074c4cbc3355d3e9fd14accc7f61fe1982e21b828950daefdada05c20aeda976c69c2f498051bbee20af2cb134044b38618194ffa9f
- SSDEEP
  
  768:jTbI92XQTvHXeSBDeecOdf8zRhLkw1JW0x:i4avV1esfYRtkU4w
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan