smokeloader | 554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252 | Triage

Sharing

General

Target

554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252N.exe
Size

219KB
Sample

241130-d76ljazqew
MD5

dd3c0d5caa44945b9b9122e86e116020
SHA1

8231510e55caf8301e797d7f29e4c248afdf33c2
SHA256

554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252
SHA512

133f4f89d0cde43b84ff40cd1e69fd1e74a0b466e8a469cf660373c3a15bfa82926f31c0b92d5c432fe84f9eb4baea4ee03999eb35e93228579c80a1249b177b
SSDEEP

3072:x246SUuS6Uti+lnlhlP5AR7jzK6LyT5FAcGt+GxEEX:I4JUcUTblP5ABzwAZt+

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252N.exe
- Size
  
  219KB
- MD5
  
  dd3c0d5caa44945b9b9122e86e116020
- SHA1
  
  8231510e55caf8301e797d7f29e4c248afdf33c2
- SHA256
  
  554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252
- SHA512
  
  133f4f89d0cde43b84ff40cd1e69fd1e74a0b466e8a469cf660373c3a15bfa82926f31c0b92d5c432fe84f9eb4baea4ee03999eb35e93228579c80a1249b177b
- SSDEEP
  
  3072:x246SUuS6Uti+lnlhlP5AR7jzK6LyT5FAcGt+GxEEX:I4JUcUTblP5ABzwAZt+
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan