smokeloader | a3155b0394d78cbf148a5fbb0a2216219aaba3fdb8d7a29a9923e01703fec098 | Triage

Sharing

General

Target

a3155b0394d78cbf148a5fbb0a2216219aaba3fdb8d7a29a9923e01703fec098
Size

140KB
Sample

241215-q8krnswmat
MD5

15b2c3d4204e538af13626bf5106cc0e
SHA1

c6de4625ff596ecf74a80fc54ece14aa44ea59ff
SHA256

a3155b0394d78cbf148a5fbb0a2216219aaba3fdb8d7a29a9923e01703fec098
SHA512

192587947bafa4523b4f50eaed19311c548b3343a4fbb1daebd3cc9d8548b99da433a1333114ad425b6c01913abe1116819cae15489fb86ace53c9ff82a245fd
SSDEEP

3072:TRGHj4gZoj/hnluApwRddZdi3RHTI3wLnUaWY0TbM25:FGHcgZiDwndGTdYbM25

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  0f22ab81f0f9b38e55ec1641388aa9470f7ba03b19130f2f46aab62f3739c596
- Size
  
  221KB
- MD5
  
  2355365f48142ec4f110089668c5ff53
- SHA1
  
  0b8e615044eda9cf618576ae220a52ecc6297445
- SHA256
  
  0f22ab81f0f9b38e55ec1641388aa9470f7ba03b19130f2f46aab62f3739c596
- SHA512
  
  7050f08b39a3143417c2ba45582a6b91104bc968706e94b5b7e5c6c01dfdd099aa0b3f460ada1396f2a4b9319f7a85581bc147d2329c2dddcbeb46fd1cec162e
- SSDEEP
  
  3072:iaYN359kq8OXBQLokw7r6ss5vKXRyt4S/9y3PvIYv0ON/EWUcUG:iai5acQLS7rtUKyknD8ON
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan