smokeloader | 4d7f4f7af040c5a3001ba6bd825804c3435adcbe16e076c6549320bded755c88 | Triage

Sharing

General

Target

4d7f4f7af040c5a3001ba6bd825804c3435adcbe16e076c6549320bded755c88
Size

104KB
Sample

241215-rlbqxswrb1
MD5

c1bdb360d9db9b53a281f41cd5825c4b
SHA1

e4f3e3a8871d7d0de6b7670f9d9ef1de83fb7050
SHA256

4d7f4f7af040c5a3001ba6bd825804c3435adcbe16e076c6549320bded755c88
SHA512

a9b911cd3a9ef1aa8e3f7453dec7c8c394309787ca67f95a579c0ce479fcde344a431a158c2733b9d1ce982202544219f4f338cb39ff96fa78b212c151b4a328
SSDEEP

3072:sSRcG8ghfT26qu9SWnODXnaPjAeqBbMn9x:sS6hGTVl8eqBbMn7

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  9a17c8cea79cbb2dfd45ad9a78ed14e3f0654b07f6c9530e4131372653fe0aee.exe
- Size
  
  153KB
- MD5
  
  d32939e553842064290e7a5e619ec003
- SHA1
  
  6b0880eb322f58063dfe49db2b1b7e01e8845261
- SHA256
  
  9a17c8cea79cbb2dfd45ad9a78ed14e3f0654b07f6c9530e4131372653fe0aee
- SHA512
  
  817a12ac72919c099b00026e5aa546dfc304f66f4fbdb155f9ab8b7df9dd6791b308c6f668ca68133f5af570260427335d86d4fe250c4dec2e9265ae0b3dfef5
- SSDEEP
  
  3072:6UfL+BOcq5haEf3iDuozC3EPjRpEi6mY44z:zL+BOwmiDuozC3EbRpv
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan