smokeloader | cfe2d63a056b79f593794c66db3cfe012a75cf3e248725c63cccaefce067a446 | Triage

Sharing

General

Target

cfe2d63a056b79f593794c66db3cfe012a75cf3e248725c63cccaefce067a446
Size

154KB
Sample

241215-q16deaxpcm
MD5

00396b2396b53b1bd172d273fc3c273f
SHA1

1b72d35ba9b804d4b307443e03d1158b969860b5
SHA256

cfe2d63a056b79f593794c66db3cfe012a75cf3e248725c63cccaefce067a446
SHA512

967becbb7660ec2efb4ea9e3bc61aed0e5a145610a5d69a6403e717ec1494c48915fbea14bf5a8f81237e01d8214cbbe893b68cf59576e22142c2165c1dfdb7f
SSDEEP

3072:j/bdVL7e6z/IfDgETlMFcSn8AqdCTCTU7/bYAVDuIOJ5IA+oID/QSDNHn:j/b7XX/iFlGcSn8AOCTJ/EvJ5IA+oID1

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  b6dc43a263d36023ac7f1c619f5a5549c1959251b0863cb5f601a221a795be90
- Size
  
  260KB
- MD5
  
  f1977f3867bf6514ae9af1025e884b21
- SHA1
  
  653b87c8115032e42dbaa38ec5899ac792d9a283
- SHA256
  
  b6dc43a263d36023ac7f1c619f5a5549c1959251b0863cb5f601a221a795be90
- SHA512
  
  07c88097ff737f3fac6c7da2685d9c817c5383de3bcce5ad8e686bff666ae9f9504e7c7bbdbdc9660602c10225af6e42f9c3b5242f4c7b6bcd0d019e2710b99d
- SSDEEP
  
  3072:uk/CB8DkKLnHTurz5m7YTbCk6kPT8AqdCTCTU7/bYAVzBJhZYccAP4JfXM/h3:nCBqTLHTXET+UT8AOCTJ/E2TYKP4JfX
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan