smokeloader | bcf1c2e6d70ff87eadc11c84b720cb6bb14683bdf7c568cabfd422a305277b7b | Triage

Sharing

General

Target

bcf1c2e6d70ff87eadc11c84b720cb6bb14683bdf7c568cabfd422a305277b7b
Size

104KB
Sample

241215-rh4brswqdv
MD5

7303bf036823755f9fe2b380efbcb01c
SHA1

6d1862325f03876d46f93ae2b6985157a800c139
SHA256

bcf1c2e6d70ff87eadc11c84b720cb6bb14683bdf7c568cabfd422a305277b7b
SHA512

e038ab85aef29b878e35037ddda39cae9f71f1ec1df1997929d199e6b74e7b6ef7c068187aad03795967e8287aaf33d9ce2eed90f6a87f77db0ec9ba8f7acc45
SSDEEP

3072:2UzlkcmHlNc78i5XCk5fqa3OFBhbOSozY7I:bqHl+7P5XCkJqKOFXOSozY7I

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  5d429a607c47fad660d2ca62cfbf27ca88ebf42d8f99626375dbd5969719c5a2.exe
- Size
  
  154KB
- MD5
  
  03105895e103097db3f1a6c0b3b1dfd7
- SHA1
  
  3a9386732fe9e21ce281819c711e35cd13a75924
- SHA256
  
  5d429a607c47fad660d2ca62cfbf27ca88ebf42d8f99626375dbd5969719c5a2
- SHA512
  
  03f477f43f02a0a116900ea5eb96315d1886f4d8887f31e30e93bdbcc756ab931385d761d44aca519efd68f31005610219e0fab1d0cd3b671b2b1648a066d3b4
- SSDEEP
  
  3072:CLhLq54zIq5Fu3tUp/tb0GCoOJ8C9qGeGMWjS/9u68:oLq54zE3mpddiDMckIb
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan