smokeloader | 3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220 | Triage

Sharing

General

Target

2a270773553cfdca5c1fdbf24d44f18c.exe
Size

226KB
Sample

241230-xbq1rawkew
MD5

2a270773553cfdca5c1fdbf24d44f18c
SHA1

ba5a6399c539f549b519f084c54852b6d434b030
SHA256

3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220
SHA512

dcb83c9e6325c5944e4eefe865ad95b4560f3e4557c18c9fb7b0ef2d1abfec3bac6bff416efdf3e042e0dcc4302263f57ea1aade22f912ee5d2f0a6a9c223c40
SSDEEP

3072:zKEbzkIj9XmBQXzBOY+UhcaPKzyU5NRS8/AZdF+:mEPkIjRmGNOMYz3H

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  2a270773553cfdca5c1fdbf24d44f18c.exe
- Size
  
  226KB
- MD5
  
  2a270773553cfdca5c1fdbf24d44f18c
- SHA1
  
  ba5a6399c539f549b519f084c54852b6d434b030
- SHA256
  
  3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220
- SHA512
  
  dcb83c9e6325c5944e4eefe865ad95b4560f3e4557c18c9fb7b0ef2d1abfec3bac6bff416efdf3e042e0dcc4302263f57ea1aade22f912ee5d2f0a6a9c223c40
- SSDEEP
  
  3072:zKEbzkIj9XmBQXzBOY+UhcaPKzyU5NRS8/AZdF+:mEPkIjRmGNOMYz3H
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan