smokeloader | 860c8d80d8f6bc554cf0365066d88b00adf9836b938d7d9f99d47a6c6cefd986 | Triage

Sharing

General

Target

860c8d80d8f6bc554cf0365066d88b00adf9836b938d7d9f99d47a6c6cefd986
Size

139KB
Sample

241215-q3z96sxpgn
MD5

14263efc960b127aaedc04079e14de6a
SHA1

7204c99638d82330f5de93a2ef38ec4352a8c90c
SHA256

860c8d80d8f6bc554cf0365066d88b00adf9836b938d7d9f99d47a6c6cefd986
SHA512

1386244705d4a5af159aefe0af779aec0460350e59f234d7da617c11bfa599e473733b7d2e27a008c9ab8ef1ce4e35daad7a59e902e1a98f59c535431d8cdb32
SSDEEP

3072:lgVbAx0os2V9aCUMbuEKSfA13dY/1UonYIX3UyaaR5bf:iVbA2JcvUMGxs1Uhs3UyLRNf

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  wRyZ6fiGUQrsT4Xb8JykOeCJ.bin
- Size
  
  315KB
- MD5
  
  82cd492a0518286cd862176c83c24bda
- SHA1
  
  648f1e68874ed43ce29a8a51bde9231c3d812e04
- SHA256
  
  17db1180deeb8d307de2b2ef7b9c8f6221672f4ae66a222ceae745e24df68c8e
- SHA512
  
  3ae85e39f1f9f6721d308449f99190b8573ff26f50baa3946a71a8a85881fcfb02d5398503f1d2c2d7abbd0f53b44a0cfcc90647649fffe6595816417bafb15a
- SSDEEP
  
  6144:sNHH4ihe5KQWfTdHPTSXuZet0ygwgAGcQwQMWL:sNHH4oeoQWfTdvTSXuZet0ygwgJwQ
Score

10^/10

smokeloader pub3 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoordiscoverytrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan