smokeloader | 20fb3541baf1a140dbb7ade337ebc1f3c331b838ac9d96b5a8a9615ef0a29f93 | Triage

Sharing

General

Target

20fb3541baf1a140dbb7ade337ebc1f3c331b838ac9d96b5a8a9615ef0a29f93
Size

110KB
Sample

241215-rakvfswmgs
MD5

b78779780c6c115ae2b8362198052ae3
SHA1

a4965de7e8c25713ad1bfa3fa12fabf371fd6334
SHA256

20fb3541baf1a140dbb7ade337ebc1f3c331b838ac9d96b5a8a9615ef0a29f93
SHA512

56badc11ffb04416e958785c360bf881641c1718d49a00ba3a14f24fd5a990de85a3bc4f737ec8d3b5fb9f59d90753935d9c253cbea2f4af102d03ca10933aca
SSDEEP

1536:jr22I2rDf2lqwC8Lkl28a2c0+NN5RikTHqAUmePoWTkdL/2E5LuLyd2jZ/jr+Eqg:jrbI2ff2xLMla2+rxWTo2E5YG8B

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  15a6e16c99c4ca4a8049c0bcdd67ffdba45d13ed31f38551b1c768d17c9d998e
- Size
  
  162KB
- MD5
  
  ce40af73e328a96a37fd5033ab096d06
- SHA1
  
  b858b85c0d494c297b49316cd4e0a7a51e91bbb6
- SHA256
  
  15a6e16c99c4ca4a8049c0bcdd67ffdba45d13ed31f38551b1c768d17c9d998e
- SHA512
  
  b886d322938bece2768b9da249a1a3e4d604cb14e11582f815dca7b5ae75b2cb434d977d7fff2549ea78f08953e5debc7d4785fa2abd04de4155c945d90f9843
- SSDEEP
  
  3072:TvQ3f6nct/HOid5UAlbGjju5vSsCjVbXEzKCtA/Zu5z1T7z5Wkf:Tkfxt/OaumafZstAhIJ7L
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan