smokeloader | 80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358 | Triage

Sharing

General

Target

80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358
Size

334KB
Sample

241215-q947psyjak
MD5

89752a865b850fedb723108873aeea27
SHA1

6a73797decf66642c0a95c0d2884cc1420503c3c
SHA256

80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358
SHA512

d53bf1a83f5a39fcad3bc28916bc0f4f80bbaa443fd9526eb6c62a2d33cd74d5183a642f003d379d5a18f5f7f0f47d8c74f78414129be06a530b68f206b0681f
SSDEEP

6144:6c2oeKztKEnMHVWQBTwBuCu3qHZdh+3oQ9gOU+fzYQ:1eKgH0G2Za9g

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358
- Size
  
  334KB
- MD5
  
  89752a865b850fedb723108873aeea27
- SHA1
  
  6a73797decf66642c0a95c0d2884cc1420503c3c
- SHA256
  
  80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358
- SHA512
  
  d53bf1a83f5a39fcad3bc28916bc0f4f80bbaa443fd9526eb6c62a2d33cd74d5183a642f003d379d5a18f5f7f0f47d8c74f78414129be06a530b68f206b0681f
- SSDEEP
  
  6144:6c2oeKztKEnMHVWQBTwBuCu3qHZdh+3oQ9gOU+fzYQ:1eKgH0G2Za9g
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan