smokeloader | 82ecef7d7317e21e5cd7302e40772aef7e752b2cb7c95d5614dfd1e86b9d75fb | Triage

Sharing

General

Target

82ecef7d7317e21e5cd7302e40772aef7e752b2cb7c95d5614dfd1e86b9d75fb
Size

125KB
Sample

241215-q4b9qsxqaj
MD5

1b2c0e79e41c0e4080a9a7b1294a7aba
SHA1

53e89ffda8a9379913468229f7985d7a1b2ea300
SHA256

82ecef7d7317e21e5cd7302e40772aef7e752b2cb7c95d5614dfd1e86b9d75fb
SHA512

688c995a11c6728fc4f663bccd4c57978df0a85076858912aec2f157ce29fda1e1d2722ab530ca2c26bdf2e7eb148243d0206fd9e28ed0dc7978ea40073d815a
SSDEEP

3072:N+8vtkdPioPEG5AFc3FOmI34kIW5lAPBvCHGOq99yKugPVZF7:c8vOdPcJIXIokIW5luBKtq99trF7

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  709bc7fcb3376403a5cc5b43c1088ad5723f5d05df75c8664e408d1c0adc3df3
- Size
  
  187KB
- MD5
  
  9d97dbeab67239eb53ba9a2ca3531da1
- SHA1
  
  e2012b6fce5a59970aaf6889ed54ec7eb7d9f651
- SHA256
  
  709bc7fcb3376403a5cc5b43c1088ad5723f5d05df75c8664e408d1c0adc3df3
- SHA512
  
  fb7a7246ab9b8ae754710fdd61a29138af9311fd701cee55cb29097a11b2b7f854c30a585b8b5016441aa893b04bc6ef32d5c8084f83306c55e1f32dd5b97007
- SSDEEP
  
  1536:fssWlyRxedIzWNK4oKhF4xN24jlDk1SG1kSAYWn5cZRhnTNKX1q0tX+qsO9yCbxz:EsWgeIyO0WXXn5U9gXsGOq99yGYNuTF
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan