smokeloader | 07381c6a8a9fdba165ff17c1ec8b7e214694404769c0894571502007ea21e7b1 | Triage

Sharing

General

Target

07381c6a8a9fdba165ff17c1ec8b7e214694404769c0894571502007ea21e7b1
Size

260KB
Sample

241215-rk585swrbv
MD5

7b669f27dd690be5b162850a956adf28
SHA1

becd0aa8658d2f44fc2058426904befce61a81de
SHA256

07381c6a8a9fdba165ff17c1ec8b7e214694404769c0894571502007ea21e7b1
SHA512

30ad88596dd8f7f50c302b70eb8935806b92eed8202114f4f603cb81d30d4f208ec5da240ff9bc14aef4b1c1e1a817e124c2be485116ebce90d4fb6f4939af83
SSDEEP

3072:6oOXGBkZTLX/dmQ1HT5Gzmn2fpNw23KuILFc70kPpLUMVK0yJM/h3:7sGBUTLXlmcozM2fpOqgkPpLvVK0yJ

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  07381c6a8a9fdba165ff17c1ec8b7e214694404769c0894571502007ea21e7b1
- Size
  
  260KB
- MD5
  
  7b669f27dd690be5b162850a956adf28
- SHA1
  
  becd0aa8658d2f44fc2058426904befce61a81de
- SHA256
  
  07381c6a8a9fdba165ff17c1ec8b7e214694404769c0894571502007ea21e7b1
- SHA512
  
  30ad88596dd8f7f50c302b70eb8935806b92eed8202114f4f603cb81d30d4f208ec5da240ff9bc14aef4b1c1e1a817e124c2be485116ebce90d4fb6f4939af83
- SSDEEP
  
  3072:6oOXGBkZTLX/dmQ1HT5Gzmn2fpNw23KuILFc70kPpLUMVK0yJM/h3:7sGBUTLXlmcozM2fpOqgkPpLvVK0yJ
Score

10^/10

discovery smokeloader pub2 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

smokeloaderpub2backdoordiscoverytrojan