smokeloader | 9f12d23eec9052bf2dd01dd9b3f96431e09c173a9160f3263eeb415c017b1973 | Triage

Sharing

General

Target

9f12d23eec9052bf2dd01dd9b3f96431e09c173a9160f3263eeb415c017b1973
Size

222KB
Sample

241215-q6xnfswlcx
MD5

b9533ca063340bf29c3f0e0703bb038f
SHA1

dab9381fd6c08bb389bb7eae73392fc27e585790
SHA256

9f12d23eec9052bf2dd01dd9b3f96431e09c173a9160f3263eeb415c017b1973
SHA512

b754ed97778ce347b7728acb3c7732c676de313c598d0d92213385d4d4cdab25ba9f2a03b3729a1b23e03fadbc24710ce9093f742337acc7bb7d080af761661a
SSDEEP

6144:hxIr78fOKW1TWr/hk1+r3JY5uyN2iqR0Zy0DG:h8rdKr/hkQOVy0ZZDG

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  255ba2ffbd8657c9a674d123241accd2bce55fdaa90d59560ad23ef96ebd829a
- Size
  
  334KB
- MD5
  
  8fb1b310465718c4e2107d4da17e509e
- SHA1
  
  aea750e57a93fd78cac750bebae45452de1c6482
- SHA256
  
  255ba2ffbd8657c9a674d123241accd2bce55fdaa90d59560ad23ef96ebd829a
- SHA512
  
  18dc38680e1be8f7a2ed2a4fbbf2aa6a6cd0597e0f488a4ba45b9850f448b97ff428da56559a9a0f8f96f36c1491751db348656a58fff51b29cadba7edadf952
- SSDEEP
  
  6144:cvMD5BzKPUkq76pr/hc5vo+xS9h+3oQ9gOU+fzYBb6:vD5kMkqkr/hcNB9gT6
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan