smokeloader | 46a1bb80ece7767296485abafcbcf7f5b176bcddba5c2beab7c997ff34461d8a | Triage

Sharing

General

Target

46a1bb80ece7767296485abafcbcf7f5b176bcddba5c2beab7c997ff34461d8a
Size

222KB
Sample

241215-q13mhswjgv
MD5

5229f56f861312166c3987ce33e1f0fa
SHA1

09813bbda3bc5dd7a5c8816ddbaba60a5923e34c
SHA256

46a1bb80ece7767296485abafcbcf7f5b176bcddba5c2beab7c997ff34461d8a
SHA512

b86ca6a642a2fea00469048ad21f5bdd884d026b819583bfc649e96f840a7747aac25b9abd2923483626de00895de9af17d2f1bbac5d49e34ca6f1e6fb88f9f6
SSDEEP

6144:SBpCp6zGYqSkNjjobvhAPrHWV0W17MZIG9seYYk/ap77sys8HN4ujZ2:Cps6zGQ0O5gFZI5eYYkSaujZ2

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  e660a454ad2b259a9f32b2360e2663abc922cd5d7ab6960d378f6c2395577d36
- Size
  
  334KB
- MD5
  
  6c83d014bf1701d5cbad9e129e10c0cd
- SHA1
  
  77155fa57d6f394102f0f551801ca3d6d699defd
- SHA256
  
  e660a454ad2b259a9f32b2360e2663abc922cd5d7ab6960d378f6c2395577d36
- SHA512
  
  be03a6d63256ad77b3daefcce570ba007079291677674b425f94f5219bb39cefc9aef5ad97440f64ff194d7a75bffa8dde5e92f35b8f954898ab870344cbb7a3
- SSDEEP
  
  6144:UAQ+oznAaMoHWV0mTAh+3oQ9gOU+fzYBb6:y+6lm9gT6
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan