smokeloader | 671025c054bcb5a68da47e033df4679ed2d1511cfa103b8043a9c18e6e97c2c2 | Triage

Sharing

General

Target

2a270773553cfdca5c1fdbf24d44f18c.bin
Size

112KB
Sample

250101-bgzdesymgy
MD5

d1d744eca0b19cf2a35b15beb7aaf00f
SHA1

4149ec11156f19fca7e9ed039a1117b637916611
SHA256

671025c054bcb5a68da47e033df4679ed2d1511cfa103b8043a9c18e6e97c2c2
SHA512

7dbc38552bffc925cfc12a65f4c8a07684ceeedce223523bfe11f843274e18912514f3508a7376efcbaf55a57c39cd88a9c97b84f0b91433f888dbbbe058e592
SSDEEP

1536:W2rxWFCAn2GxdFoKedtP0XJg7Rh43q6X62deEITDv4uCdVtVD6WBNub7SqqJOuuA:/9cCAPdNedWXMyjtQEgUJdBDrK1nTc

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220.exe
- Size
  
  226KB
- MD5
  
  2a270773553cfdca5c1fdbf24d44f18c
- SHA1
  
  ba5a6399c539f549b519f084c54852b6d434b030
- SHA256
  
  3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220
- SHA512
  
  dcb83c9e6325c5944e4eefe865ad95b4560f3e4557c18c9fb7b0ef2d1abfec3bac6bff416efdf3e042e0dcc4302263f57ea1aade22f912ee5d2f0a6a9c223c40
- SSDEEP
  
  3072:zKEbzkIj9XmBQXzBOY+UhcaPKzyU5NRS8/AZdF+:mEPkIjRmGNOMYz3H
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan