smokeloader | 469d4f36603c3a16cb1bed46236a8fc1a65a07df848858457641a4ded77adff4 | Triage

Sharing

General

Target

469d4f36603c3a16cb1bed46236a8fc1a65a07df848858457641a4ded77adff4
Size

259KB
Sample

241215-q4f8pawkft
MD5

36264e3092b623d701cd03def5f64d7a
SHA1

7d23cbbef1018b03e97b0c170de14df83f92a23b
SHA256

469d4f36603c3a16cb1bed46236a8fc1a65a07df848858457641a4ded77adff4
SHA512

d2b09551aeafd6dcdf040e4b10f14c192d932272f22936e299f9365993575c907b8dda328bf2658af6d0d6c4f0b5eca7e20e5f2b48cd6fe7fddc616556850d6b
SSDEEP

3072:/71vBwKsM0Lav7dqz5BAhu2bQ0M9Eqn2LIDOeDpLAue5jM/h3:pvBPD0Lo7nLbQPyt6pLA7

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  469d4f36603c3a16cb1bed46236a8fc1a65a07df848858457641a4ded77adff4
- Size
  
  259KB
- MD5
  
  36264e3092b623d701cd03def5f64d7a
- SHA1
  
  7d23cbbef1018b03e97b0c170de14df83f92a23b
- SHA256
  
  469d4f36603c3a16cb1bed46236a8fc1a65a07df848858457641a4ded77adff4
- SHA512
  
  d2b09551aeafd6dcdf040e4b10f14c192d932272f22936e299f9365993575c907b8dda328bf2658af6d0d6c4f0b5eca7e20e5f2b48cd6fe7fddc616556850d6b
- SSDEEP
  
  3072:/71vBwKsM0Lav7dqz5BAhu2bQ0M9Eqn2LIDOeDpLAue5jM/h3:pvBPD0Lo7nLbQPyt6pLA7
Score

10^/10

smokeloader pub2 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoordiscoverytrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan