smokeloader | 2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778 | Triage

Sharing

General

Target

2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778
Size

230KB
Sample

241204-y52j1svpdk
MD5

841dd5e68fb06740c955a5f58cfcb44e
SHA1

834f1a81625d4c45bbc7f7ad8ed9fa05e7379485
SHA256

2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778
SHA512

232ce900cd054bc4b7bbaebd848f87d2d590ab4d090b3bf1ef493c402f26a9198f07a987163c54260bcf6039fc9752eca9cdcbb441d342fe00e73afc57eb0f9a
SSDEEP

3072:+3l7Wpw7SH+ahYg5wH91Jl0yaS5JUznpR2sm8Q8wc:I79+PhJwhcbpR2J8bwc

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778
- Size
  
  230KB
- MD5
  
  841dd5e68fb06740c955a5f58cfcb44e
- SHA1
  
  834f1a81625d4c45bbc7f7ad8ed9fa05e7379485
- SHA256
  
  2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778
- SHA512
  
  232ce900cd054bc4b7bbaebd848f87d2d590ab4d090b3bf1ef493c402f26a9198f07a987163c54260bcf6039fc9752eca9cdcbb441d342fe00e73afc57eb0f9a
- SSDEEP
  
  3072:+3l7Wpw7SH+ahYg5wH91Jl0yaS5JUznpR2sm8Q8wc:I79+PhJwhcbpR2J8bwc
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan