smokeloader | ab227e912dbd5f32ec9b1f72ddda0f22efed44f51a5d87a9685312802c36a9c8 | Triage

Sharing

General

Target

ab227e912dbd5f32ec9b1f72ddda0f22efed44f51a5d87a9685312802c36a9c8
Size

206KB
Sample

241215-q2dd1swjhx
MD5

d1dd5d9a1015416b2f33b55696d98701
SHA1

366cbcfa3253d006496db8cc106ff20b3068b55e
SHA256

ab227e912dbd5f32ec9b1f72ddda0f22efed44f51a5d87a9685312802c36a9c8
SHA512

b63319be9bdb694168c9fe31893f1f772dc774c9b2dc3ebd69c4028eed93d7da7373a7329d94f459afa8d89443e0ff601a364ca854b2a99aa0924849847acf8b
SSDEEP

6144:MIgnDPHIb+YBP8VHWxbPa7P9OKELjbFln:MIgYZm2Zaj9jELnDn

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  720b696ac3934e3c82bec8b448ed45fbc9ec8fc52be7c150fdcb4239f60050b7.exe
- Size
  
  315KB
- MD5
  
  69afe0d11858c7c446fddfd9e7fc46dd
- SHA1
  
  2e2bd86ce78a558cd22cb1aef172c0f6c00b9154
- SHA256
  
  720b696ac3934e3c82bec8b448ed45fbc9ec8fc52be7c150fdcb4239f60050b7
- SHA512
  
  a3ad4f7e889dbbeb77ad017bf761c12f49a989d600568745c07bc0e64a67c411eead56860ddbac242c9d086b9dddbf7478ae6a3efdedeca519040d00b0a9762f
- SSDEEP
  
  6144:YEmcuULoxvgOtvO48Fq1RvnHZuFyEn2E1aJ:YnOUxvRtmXE3P8yUv
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan