smokeloader | 8ba0b30450c0c8e065f665ef3a8c1181b5d669480964211a89a20c42e87af1d0 | Triage

Sharing

General

Target

8ba0b30450c0c8e065f665ef3a8c1181b5d669480964211a89a20c42e87af1d0
Size

309KB
Sample

250125-dh6j8stnfn
MD5

1b62d8c0e8d0eb18d7804a2322aa7533
SHA1

27e6a71fc46a75b6ab313f24b42400c18b3b78a4
SHA256

8ba0b30450c0c8e065f665ef3a8c1181b5d669480964211a89a20c42e87af1d0
SHA512

707356c0e3e9827a27d3c4ba28d7f03cc97245a3d4f18555e2f89686df09178aed742c54b9dd8a978655fd5a61680efa775ce9a6ccac945ebb612bb3e5063e5f
SSDEEP

6144:cCwqNmoLPcaxBVpOUKTYOHIVWDCEBSorAK:cCzNm6DxpEYOHeWeEBSoZ

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  8ba0b30450c0c8e065f665ef3a8c1181b5d669480964211a89a20c42e87af1d0
- Size
  
  309KB
- MD5
  
  1b62d8c0e8d0eb18d7804a2322aa7533
- SHA1
  
  27e6a71fc46a75b6ab313f24b42400c18b3b78a4
- SHA256
  
  8ba0b30450c0c8e065f665ef3a8c1181b5d669480964211a89a20c42e87af1d0
- SHA512
  
  707356c0e3e9827a27d3c4ba28d7f03cc97245a3d4f18555e2f89686df09178aed742c54b9dd8a978655fd5a61680efa775ce9a6ccac945ebb612bb3e5063e5f
- SSDEEP
  
  6144:cCwqNmoLPcaxBVpOUKTYOHIVWDCEBSorAK:cCzNm6DxpEYOHeWeEBSoZ
Score

10^/10

smokeloader pub4 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoordiscoverytrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan