smokeloader | f1461e9dfd2e586cf7d1192508647362475ac2b3bb6136313cba27e98e84ae7b | Triage

Sharing

General

Target

f1461e9dfd2e586cf7d1192508647362475ac2b3bb6136313cba27e98e84ae7b
Size

302KB
Sample

241215-q66lcsxqhr
MD5

d91c871251a465d6d8c2ef6166b36b92
SHA1

33003f4254f6eab3a2d78bf26779791f805d337d
SHA256

f1461e9dfd2e586cf7d1192508647362475ac2b3bb6136313cba27e98e84ae7b
SHA512

b18172c6f7856e320b51d7bb50d18b8625ca41707a8ce6cbdad8905220625fde77b1e2a8c8f626b6c2eaa7a7fd873629e119d27218619555a433d8d832bd2759
SSDEEP

6144:TwFimQ7dlsVItIiPHjdfg2jtS3c22tThsIeGjY6:MFimQMVItL6aS3c22ZVE

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  f1461e9dfd2e586cf7d1192508647362475ac2b3bb6136313cba27e98e84ae7b
- Size
  
  302KB
- MD5
  
  d91c871251a465d6d8c2ef6166b36b92
- SHA1
  
  33003f4254f6eab3a2d78bf26779791f805d337d
- SHA256
  
  f1461e9dfd2e586cf7d1192508647362475ac2b3bb6136313cba27e98e84ae7b
- SHA512
  
  b18172c6f7856e320b51d7bb50d18b8625ca41707a8ce6cbdad8905220625fde77b1e2a8c8f626b6c2eaa7a7fd873629e119d27218619555a433d8d832bd2759
- SSDEEP
  
  6144:TwFimQ7dlsVItIiPHjdfg2jtS3c22tThsIeGjY6:MFimQMVItL6aS3c22ZVE
Score

10^/10

smokeloader pub1 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoordiscoverytrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan