smokeloader | c8f3651a865a4a7a9de19f28ea185ab74db48efc5387a3d20a148ff579b0be78 | Triage

Sharing

General

Target

c8f3651a865a4a7a9de19f28ea185ab74db48efc5387a3d20a148ff579b0be78
Size

105KB
Sample

241215-q42vdsxqcq
MD5

ee21996629f2f39f101b679c34405443
SHA1

e043bfd26e5ed36e40285f3642059d82706aeab1
SHA256

c8f3651a865a4a7a9de19f28ea185ab74db48efc5387a3d20a148ff579b0be78
SHA512

a0941aabce273c5475a13d45c21b8bbc6df24d6f906c17a1339eb9a073280d38de1d340e6ccbd7a93adbf765aa862263168313076a5fa0df100ba537f742edb1
SSDEEP

3072:3S1qGoe3VBrVyX1Pev83bIYqrq/HyAbXO/KbbDCjr:3RGouVBr8XpHbkrcK/KvDg

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  e4058d32ab03a3ee4f6e2229a2c01c1abcea1916e476600426f8323b742fde81.exe
- Size
  
  153KB
- MD5
  
  7bd230781f4a23bd9f7a6f1a7306de46
- SHA1
  
  72f9791d44c30e0fdf56b3f7adcf393ad54df73d
- SHA256
  
  e4058d32ab03a3ee4f6e2229a2c01c1abcea1916e476600426f8323b742fde81
- SHA512
  
  1d75e272a1ddfc4dd4c43562a562709bf4e805bbdd21cbcb3f71cad38a8d2dd3b40609fcab03416a7cea582506418fba6549bb0d7e1a8b41e6fcfa858eae8f4b
- SSDEEP
  
  3072:MqUEL2y8bq5H9FriX1PFTgbhLnenZgx6P:x9L2y8y9FriFFTQLIZgu
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan