smokeloader | 7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f | Triage

Sharing

General

Target

7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f.exe
Size

233KB
Sample

250318-fvk56svwfw
MD5

eda6e5a44657001108351760d2425c80
SHA1

bff6e0250b689d1431e72f8cf070d115ba4720f9
SHA256

7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f
SHA512

9af07ebae8bfe8158f7cdec67ac7849f3098c7b4c93fa4769ff67b40ef067221c32cc32eaf5daa2f53f5ff14c507c065e218ad00e66460f9e3737da29ff7f86e
SSDEEP

3072:45pTizma5Es7ry+KlhQoHb0NlJD4/P4rmmye8QBgW8a1IIsT8:GFa5F6t0vD4/PSm8qhIsT

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f.exe
- Size
  
  233KB
- MD5
  
  eda6e5a44657001108351760d2425c80
- SHA1
  
  bff6e0250b689d1431e72f8cf070d115ba4720f9
- SHA256
  
  7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f
- SHA512
  
  9af07ebae8bfe8158f7cdec67ac7849f3098c7b4c93fa4769ff67b40ef067221c32cc32eaf5daa2f53f5ff14c507c065e218ad00e66460f9e3737da29ff7f86e
- SSDEEP
  
  3072:45pTizma5Es7ry+KlhQoHb0NlJD4/P4rmmye8QBgW8a1IIsT8:GFa5F6t0vD4/PSm8qhIsT
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan