smokeloader | 7eb74b0fc1f799d4cde9f3c469724644e6b209c88c48da5ff935bcef0de63e35 | Triage

Sharing

General

Target

7eb74b0fc1f799d4cde9f3c469724644e6b209c88c48da5ff935bcef0de63e35
Size

224KB
Sample

241215-qzcppsvrhx
MD5

870aed252ac4b940508440e9fe3dc829
SHA1

5c170f838d3b95d28b4b479297ee73d38fe75ff3
SHA256

7eb74b0fc1f799d4cde9f3c469724644e6b209c88c48da5ff935bcef0de63e35
SHA512

c2492ec9bf7dc89cfed01c4eaa7b48cd63e4fe21051eba7da923b35537e5bdf0ee63de7e16dfbbd48295ab4d4482db23934236403b5315aaf6be3d85712a4853
SSDEEP

6144:rTFUBph+99/eeTZfznuepM6vThfDZA0MCTzA7yqOIk:rTCB/+7/T5aiM6LxZhrEGLIk

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  cba5b45508d2a6b0fa6cd52ebd1bc558b075a7e1d1ddd5ab036013290a5124f8
- Size
  
  327KB
- MD5
  
  2a6b380a44b0c9dec39d7bd0afb6d296
- SHA1
  
  b5fc7b099a4a33709bb9351ca0337e0757f73e0b
- SHA256
  
  cba5b45508d2a6b0fa6cd52ebd1bc558b075a7e1d1ddd5ab036013290a5124f8
- SHA512
  
  1a5b6d8f489cb5ff5f012cbb700338c38585d452ff13827854d7d00e805017a078043295a13e5a56cca837de318d80665bdf4a63c86cc6f39dff4a4614e17a2c
- SSDEEP
  
  6144:VXvWr7ss0TZfznuDFLCZhVV4E+O13oXc5:VvaQs0T5ac0DOn
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2