smokeloader | ebab2794c953add954349427bb2d2b925557fa858a025dc6f644297209a1c708 | Triage

Sharing

General

Target

ebab2794c953add954349427bb2d2b925557fa858a025dc6f644297209a1c708
Size

154KB
Sample

241215-qzt9raxnfr
MD5

e42a43f3d60cf9ce8a027c986a061fb6
SHA1

85de0f3e0c2ddd9caa50e69af470f3c5076747bf
SHA256

ebab2794c953add954349427bb2d2b925557fa858a025dc6f644297209a1c708
SHA512

0384f9d707e5149067c8d19c949c2719e3a9266920c025a972383f236470eb3ac8960a59f10e29bc07327cf81e36282114a22dc1ca88b40251ae1a73f370d817
SSDEEP

3072:YzRHshR7PCUUjAKLUPrJMubdeQAedREqDmhGVEXL85Oyvaczv:YJA6FjAKLUPrJ+e7pw857fT

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  6b15cfb4acd1e77c3138151d6ce6b9e242737aa445a7dad386d505e69b3d4fb1
- Size
  
  235KB
- MD5
  
  e04d988822db09d0e81e9f8c7eaad9eb
- SHA1
  
  0ef8f4636abfa2fb36206039f35bedbfe779e9a9
- SHA256
  
  6b15cfb4acd1e77c3138151d6ce6b9e242737aa445a7dad386d505e69b3d4fb1
- SHA512
  
  ce617982cb96cbc2f041b7d9c2d219306363e94e669ab01e39ecaa6f72b2c3ff073f3438dca7f5c214f1e7a4b7f67d648de0a05e9bfb1edb8e282cda76d801ee
- SSDEEP
  
  6144:vJyLBt6myGPjz4zH9+kTLNKTUrv9T2lhe6:vEvrNrcD9714
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan