smokeloader | e2a1b323660cc359cb25f12f32a6351861b0ffcd7385550607da010a0fa747eb | Triage

Sharing

General

Target

e2a1b323660cc359cb25f12f32a6351861b0ffcd7385550607da010a0fa747eb
Size

111KB
Sample

241215-q5clwsxqdp
MD5

9ed171bc1a9a4bbea21e6425ff53f511
SHA1

2eb00ad8d142c011b2f75fd2426f2c46165e7ae8
SHA256

e2a1b323660cc359cb25f12f32a6351861b0ffcd7385550607da010a0fa747eb
SHA512

cbb8f58c217288f3e5089bd831a54c28cc30902a33db2062a16f2b69b8f377541f4806621ceb877776734695fa2a811c887238d3337c68a0237ca8837a777b1e
SSDEEP

3072:uFKx6yJ2qL97o9qnVpB2qFwbP81uI2opPXAGzWvtb:KKxZxxM4p1/uIFw+WN

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  4d1495b4b4a339d413ce60a0d3d5653c97e2ae9b13018690d09b391ddcb462f7
- Size
  
  162KB
- MD5
  
  eae99d7acff5b2108fd9c76f89f58342
- SHA1
  
  70defd9137db6e5385d378a0a784a8eb7d1fe924
- SHA256
  
  4d1495b4b4a339d413ce60a0d3d5653c97e2ae9b13018690d09b391ddcb462f7
- SHA512
  
  37ae09be18d332ffddce724bdfeb2c8f0fc2ee301d5ae714d7363975a3aacd6a3aa768c613df18643131b55ea46f8ca0f3edf2e2bc9c4696d1ceca48c9c5916e
- SSDEEP
  
  3072:3ucz0+hWhwSKd54r6x4pFK7pR46wWtRrlgceB:3t0TqSnlFklvXlVm
Score

10^/10

smokeloader pub2 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoordiscoverytrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan