smokeloader | e97c6209faa8bba55446dcf156164fcc4ad07c1b816b333cba0a560155a454a4 | Triage

Sharing

General

Target

e97c6209faa8bba55446dcf156164fcc4ad07c1b816b333cba0a560155a454a4
Size

206KB
Sample

241215-rdahwsykbp
MD5

38ca3d9bfa7933a7bc60d7be2a3e8f9f
SHA1

c77c59b941ee603ffddab8718e63355316a34c8b
SHA256

e97c6209faa8bba55446dcf156164fcc4ad07c1b816b333cba0a560155a454a4
SHA512

60bff9f07b04ef4d0daa5353a14297954178d45c8ac5d408a5cafe902446d7a3b7b9c6b1f085c263947b3b191becbb13aa92b98ed6a0b0abd0ed6713de2d6ea5
SSDEEP

6144:rFi1qIaL5jLSpF9IfzY6RcY9gzTDPqA73op4BFZS:5i1HaFidIfzHRiDPqZpqZS

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  09b00c6a060a210aa59950782f7b9e06affccd5480ad4d6aab4fdb95b4b893dd.exe
- Size
  
  315KB
- MD5
  
  2201121a0542aac2b72449bd31332b2f
- SHA1
  
  e26daca908b0cbbf8d4804fd2f52e493d08a3560
- SHA256
  
  09b00c6a060a210aa59950782f7b9e06affccd5480ad4d6aab4fdb95b4b893dd
- SHA512
  
  174512f8dc1f0ae2bc80be3c78f67be420f0b4dfc5e74377c79eb44258007b5a4e6e869e32e4bd1c64228ce7b1a6e5526dc5c7fa47b2de3f78d472fbffa1687c
- SSDEEP
  
  6144:fZhUcLq4wgy/q5BI4UqN3vZePEn2E1aJ:fTZO4wFCoqN3B+Uv
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan