smokeloader | 845900cc39f346e9b1be5aa78b373778dc2825eee6d18082af62b5588630cf90 | Triage

Sharing

General

Target

845900cc39f346e9b1be5aa78b373778dc2825eee6d18082af62b5588630cf90
Size

116KB
Sample

241215-qy2mfavrgw
MD5

9f285dc3b9234c12b6a088026c75d81e
SHA1

d52895c3d71c187e5d0af5339ef39127089df317
SHA256

845900cc39f346e9b1be5aa78b373778dc2825eee6d18082af62b5588630cf90
SHA512

eebe7c6857ac0447baca415b39b3fa98982837efa4ac4f9f8330613920dc67901e60578cff66ec120548a66ac87a7f4daff6e3165a5eb2269df746070b7f7d36
SSDEEP

3072:aBIgn+p0kuoYWO5Z6yYFzEWGUvHd2xiiRX2/q6AHWPHj:+n+prfYW3JFxGIHqonAHWPD

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  566368ea41e868d698b1600f81484f91727c2338a86f735515975c3dc0cdab20.exe
- Size
  
  175KB
- MD5
  
  431a8333c6a67c243fd7715367890e95
- SHA1
  
  4b9107c7e0ccf2de842ead2d1c3cb05ecd53252e
- SHA256
  
  566368ea41e868d698b1600f81484f91727c2338a86f735515975c3dc0cdab20
- SHA512
  
  7d53460f12fc1b2ec685580c08360fe844fba2ecdddc3e7c5a3398ce4d9c98abbc2a6fa31e7c98c7e14dbe7f3456d7d86bfa15a340ad0d2b4208066e10ccb741
- SSDEEP
  
  3072:zVZQLTDLr5qJsw/zRXS+Hg0cKOU41rhN6NunuKq3/I1OFZiXmR:5qLr5qJsEFdye4936kuzQ1Or
Score

10^/10

smokeloader pub2 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoordiscoverytrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan