smokeloader | cc4b872dc837b1024b446e955d0b7e2c5fad778ce39c107c61276288f70a6456 | Triage

Sharing

General

Target

cc4b872dc837b1024b446e955d0b7e2c5fad778ce39c107c61276288f70a6456
Size

163KB
Sample

241215-rbwy4swnds
MD5

79bf3113ca7676a034ac332c5f6b42ad
SHA1

3e73dda0ac7cb62ad29b867f931be9768ce7cfe5
SHA256

cc4b872dc837b1024b446e955d0b7e2c5fad778ce39c107c61276288f70a6456
SHA512

281023bab050e253d8f1a71e0ae9707d37fed30a8eb0caedbd3bb64f574a262ffb3ce0f586e9c4bf9588ac9739b3bff969a9886309131961823288419dd91fa0
SSDEEP

3072:bjLLcvH0Y0fNF58hICqzYAlLk+sFeoSjcKQklqjzois5Rkt3FLyRwfZg:bbcvH0YWgWCmO+sdFAp5rwe

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  a46bd5076e4b2ec02eb0c30eae496273047a899e976197263957096a005c11d4
- Size
  
  261KB
- MD5
  
  c37c9d767220b694ccddaddde5136694
- SHA1
  
  5ba7b52567430a131cb8a67e6706a1a352cdee70
- SHA256
  
  a46bd5076e4b2ec02eb0c30eae496273047a899e976197263957096a005c11d4
- SHA512
  
  19cebbfac016f6d7c6631da09e4f6536a3f3d38d343f1469bb15c927d17bc42fa018be4aed1e6df93b817fb255cc12e8b763fbd6867c496ab5c08644b3b4ea78
- SSDEEP
  
  3072:5XOKjPPtgWqLKXmQL7n5JRxt5MZpv2QMDr3zs/SNFbgb1L+my+2M/h3R:d5PPqWqLsLJxETORDvs/4h8c+28
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan