smokeloader | 69be106a58a732a7f841ce36f7d3f88b4b38960fef38caf9691e55e85ffa8524 | Triage

Sharing

General

Target

69be106a58a732a7f841ce36f7d3f88b4b38960fef38caf9691e55e85ffa8524
Size

252KB
Sample

241215-q8s32swmbv
MD5

001b178fd1540169ed8e089cd133fe28
SHA1

f805695896ff7dcbbc2e4dfac0e97bf5e2de0fca
SHA256

69be106a58a732a7f841ce36f7d3f88b4b38960fef38caf9691e55e85ffa8524
SHA512

86172747e4033a78b578a9f0742b4bf5d744d71510b9a20c4398ae11072f9c15a097ddad3138dff95ca42ab14c66ce024c3a629a92486dda7fb5742f17dabf59
SSDEEP

3072:77bedDX3GpcxfVAvIzvHZG3EtStB8EdesxkgaBChUpZa9uD6Vdyhk:XbmbGpcxfVAKZG3EqOEdbiga3wVf

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  69be106a58a732a7f841ce36f7d3f88b4b38960fef38caf9691e55e85ffa8524
- Size
  
  252KB
- MD5
  
  001b178fd1540169ed8e089cd133fe28
- SHA1
  
  f805695896ff7dcbbc2e4dfac0e97bf5e2de0fca
- SHA256
  
  69be106a58a732a7f841ce36f7d3f88b4b38960fef38caf9691e55e85ffa8524
- SHA512
  
  86172747e4033a78b578a9f0742b4bf5d744d71510b9a20c4398ae11072f9c15a097ddad3138dff95ca42ab14c66ce024c3a629a92486dda7fb5742f17dabf59
- SSDEEP
  
  3072:77bedDX3GpcxfVAvIzvHZG3EtStB8EdesxkgaBChUpZa9uD6Vdyhk:XbmbGpcxfVAKZG3EqOEdbiga3wVf
Score

10^/10

smokeloader pub5 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoordiscoverytrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan