smokeloader | 4ca587438a1f7a5e36d3cc8ff537c1f9fbd50b1550350381f43b47b451ea90e8 | Triage

Sharing

General

Target

4ca587438a1f7a5e36d3cc8ff537c1f9fbd50b1550350381f43b47b451ea90e8
Size

105KB
Sample

241215-qx3s4svrdx
MD5

4548d79cd97558cd6132793264b5ba5e
SHA1

71f43d7154905c37bf5a48f32690f468e4ad8cd2
SHA256

4ca587438a1f7a5e36d3cc8ff537c1f9fbd50b1550350381f43b47b451ea90e8
SHA512

b142a458f8b3432cc90c8e047c52af6162f5c3f84bd47f53b43cfc0150c25a154fddef8c8959031998d340ebca9fdd069e90a375b4c7729036099a61992ce2b1
SSDEEP

3072:Y/sQj3m0dmv6uQ3pqfWvpxM1F9ZEIO2ubXbbpXX:Y/Fdmv6uYpFQEtLbbx

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  9acecc20de19222b6d49f18398e36004d4e275e79b5e1338288253f84584073e.exe
- Size
  
  154KB
- MD5
  
  e6964834834dcb20747c254faaaa042d
- SHA1
  
  2d28d686b9ea5fea06d9da78bc41ded8c6cc0353
- SHA256
  
  9acecc20de19222b6d49f18398e36004d4e275e79b5e1338288253f84584073e
- SHA512
  
  2341521f9e3a9e6f609f3fa42b9be0daa405be0b93365cc4dc594ba1b8fed383724d6e20fa003ebe2d16be63c23b6e56347fbbc21896cfed57e765d8cec077b4
- SSDEEP
  
  1536:vOssWget4LsUUlv1kve0WD6q5crdgNirRE0a2Ml/bWtImADjdqMJ2h3vG4blo/JG:v7aLIDz2q5HEr2OxA1qMJ2h/GAO/J4l
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan