smokeloader | e704f1d7678a12662c1570b0a0b14b2cbe2138ecdd584e317bd1326af1e93adc | Triage

Sharing

General

Target

e704f1d7678a12662c1570b0a0b14b2cbe2138ecdd584e317bd1326af1e93adc.exe
Size

293KB
Sample

241219-mmkb8s1mfl
MD5

c3db2a21c549260ad5a4162ee92dee1e
SHA1

3a7910ec7255c1f342245154097c091dd27c7469
SHA256

e704f1d7678a12662c1570b0a0b14b2cbe2138ecdd584e317bd1326af1e93adc
SHA512

84d3cd081f5dafca8d458c7d7df22347421c2421695bf54b287a0e7e46af47400109e8902c099375fccce17b1be016f4e1761e054489e6a4fbf0ce86b2d9e922
SSDEEP

3072:oHIXFpzSD/iNVAxAgIystoFneQ1yfOl+UwhcSDPHK2gg85ve1:ccFZSW0xAVyswN2OlzwZDPHKdg8F6

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  e704f1d7678a12662c1570b0a0b14b2cbe2138ecdd584e317bd1326af1e93adc.exe
- Size
  
  293KB
- MD5
  
  c3db2a21c549260ad5a4162ee92dee1e
- SHA1
  
  3a7910ec7255c1f342245154097c091dd27c7469
- SHA256
  
  e704f1d7678a12662c1570b0a0b14b2cbe2138ecdd584e317bd1326af1e93adc
- SHA512
  
  84d3cd081f5dafca8d458c7d7df22347421c2421695bf54b287a0e7e46af47400109e8902c099375fccce17b1be016f4e1761e054489e6a4fbf0ce86b2d9e922
- SSDEEP
  
  3072:oHIXFpzSD/iNVAxAgIystoFneQ1yfOl+UwhcSDPHK2gg85ve1:ccFZSW0xAVyswN2OlzwZDPHKdg8F6
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan