smokeloader | ae1f34b270215a9ae41bf027f0a6a350c8e9652e1e6067f79bb39348eb82d8c3 | Triage

Sharing

General

Target

ae1f34b270215a9ae41bf027f0a6a350c8e9652e1e6067f79bb39348eb82d8c3
Size

153KB
Sample

241215-qv5jxsvqgv
MD5

a5eb71c467a4ffe9d4d181a15b96ad64
SHA1

c3b8b56771117f9215a649bc479f24b2a69a1536
SHA256

ae1f34b270215a9ae41bf027f0a6a350c8e9652e1e6067f79bb39348eb82d8c3
SHA512

a7dd1e8a3a2e70e31f759f701ed240bc4a4a50d1d1221a2f6fa6d85af0f5e72260c1d93b4c0176cd4057eabc93dc10489fd32f5b83089e14aeb34c2140abd9a8
SSDEEP

3072:AWKacyg0arMJ2e1s9+gt2OJbJYn1Xya3wHA62/38vNouAOb:AWsZMJO9+gt2OXYn8a3NdUvS7e

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  77d37a430a99108373307eb7c17ecdae4ea3aafb3065a803b264278522e41450
- Size
  
  234KB
- MD5
  
  0b8bfba165a4a8362fc9306c3e9eb604
- SHA1
  
  b455f23deb8e502d106e5566087ff2b0b7dea047
- SHA256
  
  77d37a430a99108373307eb7c17ecdae4ea3aafb3065a803b264278522e41450
- SHA512
  
  3097f5390150cb912fcdf2c4c6d6259aae00c76b6fc9513f22727c4ef38187b3d5b53095f97af8d9b20af141197e0de082a09b7ff63694005f3567bf31fe02d9
- SSDEEP
  
  3072:C4pvTrLgd0u7jW245T0eDTfxph/OOkblrk2NiruKDUXJ2v40T2ui7le6:ZpXLO7jWoenf/pepLNKDXv9T2lhe6
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan