smokeloader | 4995678c8a4d9336fd9c02a44f9ba3a210d8d985ebbe5d8d97c611ce9ae2975e | Triage

Sharing

General

Target

4995678c8a4d9336fd9c02a44f9ba3a210d8d985ebbe5d8d97c611ce9ae2975eN.exe
Size

293KB
Sample

241219-capfbasncl
MD5

40f17a5bfe442c3326df4a5cd2369e40
SHA1

9ee2236629e5b21399da88b245cc17d020d4c0da
SHA256

4995678c8a4d9336fd9c02a44f9ba3a210d8d985ebbe5d8d97c611ce9ae2975e
SHA512

a264ca823435bcf13cc73c8b900300835682651ef3a188d282f340f5821d188edba72ce4c6fc7e9b81120bbc104149a892c9f905896768fc486ebdc93fa7ecf0
SSDEEP

3072:oHIXFpzSD/iNVAxAgIystoFneQ1yfOl+UwhcSDPHK2gg85ve:ccFZSW0xAVyswN2OlzwZDPHKdg8F

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  4995678c8a4d9336fd9c02a44f9ba3a210d8d985ebbe5d8d97c611ce9ae2975eN.exe
- Size
  
  293KB
- MD5
  
  40f17a5bfe442c3326df4a5cd2369e40
- SHA1
  
  9ee2236629e5b21399da88b245cc17d020d4c0da
- SHA256
  
  4995678c8a4d9336fd9c02a44f9ba3a210d8d985ebbe5d8d97c611ce9ae2975e
- SHA512
  
  a264ca823435bcf13cc73c8b900300835682651ef3a188d282f340f5821d188edba72ce4c6fc7e9b81120bbc104149a892c9f905896768fc486ebdc93fa7ecf0
- SSDEEP
  
  3072:oHIXFpzSD/iNVAxAgIystoFneQ1yfOl+UwhcSDPHK2gg85ve:ccFZSW0xAVyswN2OlzwZDPHKdg8F
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan