smokeloader | 885ffbd060d8297943af3d9c136d1e440480334d7dc2563cce9d08135ffd86fd | Triage

Sharing

General

Target

885ffbd060d8297943af3d9c136d1e440480334d7dc2563cce9d08135ffd86fd
Size

105KB
Sample

241215-qy7hpaxncl
MD5

ae1c44a657a5ddc430624015234f0f4a
SHA1

fbc5de45f63ba9f377a11875c6daf2c0da43f4dd
SHA256

885ffbd060d8297943af3d9c136d1e440480334d7dc2563cce9d08135ffd86fd
SHA512

3f0f46001e1e17c1844584cba5b47849471e9c82302900e5bf23e51783c8fe2445c2c9428b73e99433f95064c55eeff7edddc9182f2844a23c3504d413467b7a
SSDEEP

1536:THVp1ohUtS0QFTw+4lJxDswm7yqqZE9UYcKlWZEm7JjFAb4dZHVY2HoAyekEWZL:7VpBfsPyS9UY+mkpFA8q2HDyZ

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  135b78976e86b51d9c687353fadfe7a440b05e9fe262ff050e7a5efa17eb130c.exe
- Size
  
  153KB
- MD5
  
  199dec915b000b95dedb5f300447b2c3
- SHA1
  
  050084b5bc049b03e81c2d2c8c8fc8812c4c5691
- SHA256
  
  135b78976e86b51d9c687353fadfe7a440b05e9fe262ff050e7a5efa17eb130c
- SHA512
  
  a0b31a8489d521b9b33bdd30e9b24f06411fe221486a67b5a0f50276776e5187a4d13daa29ae976094ed86a0c2d5fa5fcc16bc2bc7d434c4c43f6246b0f628b8
- SSDEEP
  
  3072:MOrhLJcxi8jq5oBBR1BbJLYWOHFm5khUpg+6:vhLSxi83BD1BF3K9c6
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan