smokeloader | 0983413cc0d093b03db0679b087dc389b09858932010567dbc6666016f27e238 | Triage

Sharing

General

Target

0983413cc0d093b03db0679b087dc389b09858932010567dbc6666016f27e238N.exe
Size

325KB
Sample

250108-lll9rstrgt
MD5

0bcbb67ef2b97f746c76fa63eebeb240
SHA1

842cb635743e2de2c9dd78601f581e5caaed09c3
SHA256

0983413cc0d093b03db0679b087dc389b09858932010567dbc6666016f27e238
SHA512

053335e44efadce4b04534c2f7cf22a114feb92c00e1fab190b3f5f76b48706a942267bc256016092e6d44b07430442caaac3c3e953161f401a80954d0b077e0
SSDEEP

6144:4QaXL1yHLo/1VshtGFDOcJki+h9MA/Z2FqtP/z:4dRyHLostWDOcJP+A7FOn

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  0983413cc0d093b03db0679b087dc389b09858932010567dbc6666016f27e238N.exe
- Size
  
  325KB
- MD5
  
  0bcbb67ef2b97f746c76fa63eebeb240
- SHA1
  
  842cb635743e2de2c9dd78601f581e5caaed09c3
- SHA256
  
  0983413cc0d093b03db0679b087dc389b09858932010567dbc6666016f27e238
- SHA512
  
  053335e44efadce4b04534c2f7cf22a114feb92c00e1fab190b3f5f76b48706a942267bc256016092e6d44b07430442caaac3c3e953161f401a80954d0b077e0
- SSDEEP
  
  6144:4QaXL1yHLo/1VshtGFDOcJki+h9MA/Z2FqtP/z:4dRyHLostWDOcJP+A7FOn
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan