smokeloader | c4d160b12dcf36db78becd7069a5cbdc949af76b5355e76ac028305c013f529b | Triage

Sharing

General

Target

c4d160b12dcf36db78becd7069a5cbdc949af76b5355e76ac028305c013f529b
Size

113KB
Sample

241215-rz6s8axlat
MD5

9262749407ad6e82dd0b8a4a45b6bd51
SHA1

99878621883f6c3e348f4f8e5107d74a41a3925d
SHA256

c4d160b12dcf36db78becd7069a5cbdc949af76b5355e76ac028305c013f529b
SHA512

b768878b2a7a8108ed78068bda63d2098229054603fc55fba740a004cc70e8285e882c2065c651d6dd7acc5c9fcc9c744190cf159562ffffbf8ee9f397fcce28
SSDEEP

3072:itgPbGwYfPgerpjXgt2LzuekS0FJpIaiu1x3RQXPg88:IgPbGwYngerpjXgt8kxvKox3RgPg

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  1ec85926d9116ffa8b165fc159d2d80eb435f30184b240bf2c8268581cd2b7fd.exe
- Size
  
  173KB
- MD5
  
  67d4d04071a1b050f7b1ca9f106d73e1
- SHA1
  
  2fc43df48f026eea82a3df6def9b105da0e6e1a8
- SHA256
  
  1ec85926d9116ffa8b165fc159d2d80eb435f30184b240bf2c8268581cd2b7fd
- SHA512
  
  cbfad57660c87ffa5b95d302cbc6be471402663af5dd532d4367f141db432b0bc75896344e1fb9c8d92df3f71660ef0bd92343a8f9418c5b3a465fa449500ae1
- SSDEEP
  
  3072:UMYf4HR3gLf7V4d/zRU0ZX57I0d8j8tYwmA8cWU4:N5wLf7V4Rm0NzmAVW
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan