smokeloader | 8f1865952b2a3e5764664cbba2231afdad6952f025b7b6a6a34081474cec80af | Triage

Sharing

General

Target

8f1865952b2a3e5764664cbba2231afdad6952f025b7b6a6a34081474cec80af
Size

113KB
Sample

241215-q979cswmew
MD5

644fe656bb6e12d3725e366c98074b84
SHA1

8c0ef848378155fbc40e24d88c2fd2802edbe530
SHA256

8f1865952b2a3e5764664cbba2231afdad6952f025b7b6a6a34081474cec80af
SHA512

83d5f9c3031da44a8e1f0034162516af1e8d30f16b1f4fd7b4ce55dd5fc4b23899a80a6cadee3d56ff77aaec9697472477bfa4041a088985fcffffa9747170ff
SSDEEP

1536:0Y0mmrfxia8Q7ER/+5kjPD1tfbmFxkBZoOM2GTkjMI/eDAJwn9/y7ymqr/7k8JDv:015vJ7ENEkDftcDTWMI/e9HYDQiM

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  73494d6cff0c00787cf022c83acbded7db16eb4ad762d4c745ebd1399ab4e45b.exe
- Size
  
  173KB
- MD5
  
  19820cc27a3cb992aa685d9772837be2
- SHA1
  
  c48e3b4df338e0e33e48e504bdb2de9489070a48
- SHA256
  
  73494d6cff0c00787cf022c83acbded7db16eb4ad762d4c745ebd1399ab4e45b
- SHA512
  
  0b7b81c4e034a424c8c186c6d35f88b8e1ba27270abaccf2a837e19101ffafe88241d63fa2d0267a4881906d3d334e12231d53b7db8b0f2058f01664c5886c68
- SSDEEP
  
  3072:daHoXexLTVtyX/zRIckjm52j0289oHvLtMKgKtGR8IviKmt5z:MXLTVtyPWc+HQ2XH5MKnGRpO
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan