smokeloader | 181e8664648303addb9d39f70bb840dce02cef4e4f1cffefa4b88b2663e8f8c9 | Triage

Sharing

General

Target

181e8664648303addb9d39f70bb840dce02cef4e4f1cffefa4b88b2663e8f8c9
Size

114KB
Sample

241215-r4v8aaxmas
MD5

c07814b7c639d7f00eb2c91d172619b2
SHA1

e17d0bd279bfe63d9db2a080a2c1e785513ea24e
SHA256

181e8664648303addb9d39f70bb840dce02cef4e4f1cffefa4b88b2663e8f8c9
SHA512

472a54344a4992acf7c904f0e64f94f1b59b2f82d94f255bd924517885921d0551e6db2c897569d533f9cf12b2c6ef0d589e928fa45727802bca40f638452581
SSDEEP

3072:EmaLTs2pH+a7+kI1NDnpo+FQcLAaTBuBH39XlQVLL:XNEKnpNFQcZVuJxuJL

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  725a938bfffc258f26a2ede43286fc8603c8c98a7ea4a3f30daa44babe88dc4d.exe
- Size
  
  174KB
- MD5
  
  27556e5d645c8abd673712cb6aedccc7
- SHA1
  
  69e14f9c7bdf7e528311eee2970a2dee9e95e59b
- SHA256
  
  725a938bfffc258f26a2ede43286fc8603c8c98a7ea4a3f30daa44babe88dc4d
- SHA512
  
  31f48be751baf75c38d12e09a56ec3a0b5669753a4608e657e2ba835a6a09482e5cb07223be813c2773b3723c60f2394dcc60da6653dd8f0126a700f937e3b83
- SSDEEP
  
  3072:QCaEYXxULIlNWu/zRdZQvmOtR2c3YCLKaUVwr4nCr:MiLIlNWGtQeOtgTiKaUVwr4
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan