smokeloader | c11b0b648a57c050f5dc1ed7dcbaf386973dc47fbffb0308a579b6fe7e5387f5 | Triage

Sharing

General

Target

c11b0b648a57c050f5dc1ed7dcbaf386973dc47fbffb0308a579b6fe7e5387f5
Size

202KB
Sample

241215-rka31aymdq
MD5

c71322e92c39613eb1ef2d3f32a1dbd8
SHA1

cfd9e8cde808fc7a2d6abbd1bd686355edefba27
SHA256

c11b0b648a57c050f5dc1ed7dcbaf386973dc47fbffb0308a579b6fe7e5387f5
SHA512

4bf1de63f8a5796b794f386f64df094b7288bb40c2575adbb01fd81ecfd0f3991cc809fde7cdd0111d16cfdbc4818388204d6cfbfbae93c99f6022aa905b9592
SSDEEP

6144:5CxM8YO8ARlqYaX4botQ5UhzHvMXR8RyDEU:ExM1gqYaX+/5USB8Ryx

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  a3a6b1fe65e060e747626a864412045881c08d8f0584749880cee83948c14736
- Size
  
  308KB
- MD5
  
  3785be1697462a69039cb73c6bce58d7
- SHA1
  
  74a000fc75baf0aff42f3da504e0a1e1268a0ab2
- SHA256
  
  a3a6b1fe65e060e747626a864412045881c08d8f0584749880cee83948c14736
- SHA512
  
  03a8050f2bb843cfa43470a637bbc2d57bc2a5366f7bc9b1d47551aeeda277bc6ee87fc5627dde457aadc97f6ddc2c9ff66078c5aa40c41b865b3adc92c47c9e
- SSDEEP
  
  6144:4+T/LRhOPa0umGaDr6hGfgr85eEn2E1a:4+bFhOPUVaDr6kfC8UUv
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan