smokeloader | 2cc9c5423c5ebde932de2210bcedb4f2f7b1567f03478172477f44c576409f07 | Triage

Sharing

General

Target

2cc9c5423c5ebde932de2210bcedb4f2f7b1567f03478172477f44c576409f07
Size

104KB
Sample

241215-r7d36szjar
MD5

89d3c44f9a10be2f50ee553453e310a3
SHA1

40fe22818033462a3cc5f554517eb5dc49929cd5
SHA256

2cc9c5423c5ebde932de2210bcedb4f2f7b1567f03478172477f44c576409f07
SHA512

7f49a75048ff18b0bacc4fa698508215cc0a31a9a01f356ef15f5a3af43d41ea04dff8603a4f8b3e0fa17d4fa749136482f3cba3f66507e4b6a622bcc8784d0f
SSDEEP

3072:5NaaTyfkCSIRjruvOWivmfKng8wRzYMBdM1hTzFoZzvZ8/s1CcP8:XBTyf1SIpujRCzwRX3GeZzK/yI

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  8f293e95ee50331a6991b814386088cd7a2b83e4dd53faaaecc3e03b0f34a3b9.exe
- Size
  
  153KB
- MD5
  
  87a5eb12adb4612816956ca98c293ee3
- SHA1
  
  4176723caba44215f1aad0a69f464694016f5485
- SHA256
  
  8f293e95ee50331a6991b814386088cd7a2b83e4dd53faaaecc3e03b0f34a3b9
- SHA512
  
  72c278fe88c637ca82f1acfe5fe7d3480ca7ec819e083a17be328de03db3c8a01ae55f55d7a5c4d47118de5509a266a8c5c33ea8e683216df913456723f1d38e
- SSDEEP
  
  1536:eM7mNmsqTeT5Lo0w+llzACtkQyDD3S5OoVOMlRMmX6e9UfhFb6z4HTmUFFRzIQKv:ntMLQ+lm1HS5YFGUZ0UCUDeQKWhr3fO
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan