smokeloader | fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3 | Triage

Sharing

General

Target

fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3.exe
Size

238KB
Sample

250108-c4fehasndq
MD5

af3e65a6dd8cdff082755c73155fb182
SHA1

77fb08db1b810c5fcb21bdee3e752ad5115b9449
SHA256

fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3
SHA512

ad2a157decdde4f3dc1661b8387ac93dbc845b8692184d1b788abceef2e81d8ff2a6b0279cf31c821a72516e91451d6606f2987954ebb7a2af24659d9d1abe9a
SSDEEP

3072:p0ef7i9FajzFgptNwf+jbjQE7f1tI/wTl53cMwd9ZGSwFl:iefrjMtmW/ES8wTTwdPGSwX

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3.exe
- Size
  
  238KB
- MD5
  
  af3e65a6dd8cdff082755c73155fb182
- SHA1
  
  77fb08db1b810c5fcb21bdee3e752ad5115b9449
- SHA256
  
  fda4801fd3fbd856ac9d746c8a944540dfa818d9ab2411f0a5b1ff77420b11a3
- SHA512
  
  ad2a157decdde4f3dc1661b8387ac93dbc845b8692184d1b788abceef2e81d8ff2a6b0279cf31c821a72516e91451d6606f2987954ebb7a2af24659d9d1abe9a
- SSDEEP
  
  3072:p0ef7i9FajzFgptNwf+jbjQE7f1tI/wTl53cMwd9ZGSwFl:iefrjMtmW/ES8wTTwdPGSwX
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan