smokeloader | 29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee | Triage

Sharing

General

Target

29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee.exe
Size

161KB
Sample

250318-camayssthv
MD5

fb8ddd837ad8b94f1faf0b4920ce7b2b
SHA1

c3bc51f18a1180be27c4ee0978aaa9e1295dbd4b
SHA256

29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee
SHA512

db218213ee139583f69b00ea7e33986857cbc73f0e549f996e0dc3b0b34282c838f874a65c13fa7e21adfb8d876ca6cef9421a19171c214b1ea98b1a99f1bc74
SSDEEP

1536:IwYZ5gZyjech8y/nK/bobGPgeMWKQxljH3PBe/8YkfbM9Wzw1mE3SmJQENYmAzTa:YiZpyDz/WVPX/9CWz9xmJQMYmAzsX

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee.exe
- Size
  
  161KB
- MD5
  
  fb8ddd837ad8b94f1faf0b4920ce7b2b
- SHA1
  
  c3bc51f18a1180be27c4ee0978aaa9e1295dbd4b
- SHA256
  
  29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee
- SHA512
  
  db218213ee139583f69b00ea7e33986857cbc73f0e549f996e0dc3b0b34282c838f874a65c13fa7e21adfb8d876ca6cef9421a19171c214b1ea98b1a99f1bc74
- SSDEEP
  
  1536:IwYZ5gZyjech8y/nK/bobGPgeMWKQxljH3PBe/8YkfbM9Wzw1mE3SmJQENYmAzTa:YiZpyDz/WVPX/9CWz9xmJQMYmAzsX
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan