smokeloader | e67b01e835d8dc81061f521d8aa255f6fe0293ee4ef5eb158c01fd1d74343f86 | Triage

Sharing

General

Target

e67b01e835d8dc81061f521d8aa255f6fe0293ee4ef5eb158c01fd1d74343f86
Size

371KB
Sample

241215-q7mjwaxrbp
MD5

158c7c66135ecfe121ddd97dd2411136
SHA1

dd4ede32d9ed218a8837be5a481c645f87428d72
SHA256

e67b01e835d8dc81061f521d8aa255f6fe0293ee4ef5eb158c01fd1d74343f86
SHA512

7698c665c6c770bf7e477a1ae55816c6571c4dbde006c067927f1499dc0435b39d79808b1a4138ef651198bdba6a014f2e298676f047b0ce88f368adaa8a7be0
SSDEEP

6144:5/CLcsaPLy+GJDsUxLIvbORzF1ge2NdcngXwOu1ql:5/CLeG+GJgUZIjwue2NdcngUql

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  e67b01e835d8dc81061f521d8aa255f6fe0293ee4ef5eb158c01fd1d74343f86
- Size
  
  371KB
- MD5
  
  158c7c66135ecfe121ddd97dd2411136
- SHA1
  
  dd4ede32d9ed218a8837be5a481c645f87428d72
- SHA256
  
  e67b01e835d8dc81061f521d8aa255f6fe0293ee4ef5eb158c01fd1d74343f86
- SHA512
  
  7698c665c6c770bf7e477a1ae55816c6571c4dbde006c067927f1499dc0435b39d79808b1a4138ef651198bdba6a014f2e298676f047b0ce88f368adaa8a7be0
- SSDEEP
  
  6144:5/CLcsaPLy+GJDsUxLIvbORzF1ge2NdcngXwOu1ql:5/CLeG+GJgUZIjwue2NdcngUql
Score

10^/10

smokeloader pub1 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoordiscoverytrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan