smokeloader | 87e85c62f0bf5cf2ae124ed105b568a5f700628e8bc361c88a91f703dc4fe8b6 | Triage

Sharing

General

Target

87e85c62f0bf5cf2ae124ed105b568a5f700628e8bc361c88a91f703dc4fe8b6
Size

248KB
Sample

250216-ccqq6awkbn
MD5

e6e51f75f1d634641f9871ffadbfac8c
SHA1

643ea1e95264a1fe26b8483ce5195f940d55986c
SHA256

87e85c62f0bf5cf2ae124ed105b568a5f700628e8bc361c88a91f703dc4fe8b6
SHA512

fb785a9bc5f52ff097c807115915d1176945a5694db446c5f7fb11bea5823413420160ea9787d3d4ac65d9f0bdf3e9d338f3d299831e1066b4217ede5d347816
SSDEEP

1536:mHCUK3cRaPDaB7ZXupohHrMZHFr/htd1mJ4/q/rlDfj7xvqZ75o1woqiq+sJOOJT:+yuepaHIPjhtd114VZvg75oORnVh

Score

10^/10

smokeloader pub4 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Targets

- Target
  
  87e85c62f0bf5cf2ae124ed105b568a5f700628e8bc361c88a91f703dc4fe8b6
- Size
  
  248KB
- MD5
  
  e6e51f75f1d634641f9871ffadbfac8c
- SHA1
  
  643ea1e95264a1fe26b8483ce5195f940d55986c
- SHA256
  
  87e85c62f0bf5cf2ae124ed105b568a5f700628e8bc361c88a91f703dc4fe8b6
- SHA512
  
  fb785a9bc5f52ff097c807115915d1176945a5694db446c5f7fb11bea5823413420160ea9787d3d4ac65d9f0bdf3e9d338f3d299831e1066b4217ede5d347816
- SSDEEP
  
  1536:mHCUK3cRaPDaB7ZXupohHrMZHFr/htd1mJ4/q/rlDfj7xvqZ75o1woqiq+sJOOJT:+yuepaHIPjhtd114VZvg75oORnVh
Score

10^/10

smokeloader pub4 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub4backdoortrojan

behavioral2

smokeloaderpub4backdoordiscoverytrojan