smokeloader | fc45c97a3d2e02bb63d9d1dc4ba25820feb2fd9bcba46d82fa451a628d85a60d | Triage

Sharing

General

Target

fc45c97a3d2e02bb63d9d1dc4ba25820feb2fd9bcba46d82fa451a628d85a60d.exe
Size

37KB
Sample

241126-nmx4rsvrgn
MD5

e12bb6ababd1866b09962f5dfe468384
SHA1

debf0ad8df1cced82eb34ce68936056aec653ee1
SHA256

fc45c97a3d2e02bb63d9d1dc4ba25820feb2fd9bcba46d82fa451a628d85a60d
SHA512

e766b52f060b807419e70d6fef756255b5f8c4b9d57bf5a05f66ce7ec17ebb0eedcddb95186789e12c5a03c6fc0a0f17a13ac7ff7c5ed378079e475f0443d888
SSDEEP

768:jTbI92XQTvHXeSBDeecOdf8zRhLkw1JW0xU:i4avV1esfYRtkU4wU

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  fc45c97a3d2e02bb63d9d1dc4ba25820feb2fd9bcba46d82fa451a628d85a60d.exe
- Size
  
  37KB
- MD5
  
  e12bb6ababd1866b09962f5dfe468384
- SHA1
  
  debf0ad8df1cced82eb34ce68936056aec653ee1
- SHA256
  
  fc45c97a3d2e02bb63d9d1dc4ba25820feb2fd9bcba46d82fa451a628d85a60d
- SHA512
  
  e766b52f060b807419e70d6fef756255b5f8c4b9d57bf5a05f66ce7ec17ebb0eedcddb95186789e12c5a03c6fc0a0f17a13ac7ff7c5ed378079e475f0443d888
- SSDEEP
  
  768:jTbI92XQTvHXeSBDeecOdf8zRhLkw1JW0xU:i4avV1esfYRtkU4wU
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan