smokeloader | d30f4f3ab220d45783b08baec0e322ee10841beed00dc6ff00569ac5d02709fd | Triage

Sharing

General

Target

d30f4f3ab220d45783b08baec0e322ee10841beed00dc6ff00569ac5d02709fd
Size

172KB
Sample

250325-tasleaytbt
MD5

a8d41cdb1096e641af72ae7dfa954433
SHA1

492971020433977d73baa18080c5615fc28f6e9a
SHA256

d30f4f3ab220d45783b08baec0e322ee10841beed00dc6ff00569ac5d02709fd
SHA512

875f98193a106c6f241f1eda58e720dd2351a7dae1abe5dd312bb9127866d0e11c4a9130177dfaf197750f4eace1367489eb50515b3bac6c944ae39609b875a8
SSDEEP

3072:xIOZRGmcB+IC5xjfLeHwhZoWC9sI5/DuT61m:x1rGFkJjLeHwhZU9sI5/

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  d30f4f3ab220d45783b08baec0e322ee10841beed00dc6ff00569ac5d02709fd
- Size
  
  172KB
- MD5
  
  a8d41cdb1096e641af72ae7dfa954433
- SHA1
  
  492971020433977d73baa18080c5615fc28f6e9a
- SHA256
  
  d30f4f3ab220d45783b08baec0e322ee10841beed00dc6ff00569ac5d02709fd
- SHA512
  
  875f98193a106c6f241f1eda58e720dd2351a7dae1abe5dd312bb9127866d0e11c4a9130177dfaf197750f4eace1367489eb50515b3bac6c944ae39609b875a8
- SSDEEP
  
  3072:xIOZRGmcB+IC5xjfLeHwhZoWC9sI5/DuT61m:x1rGFkJjLeHwhZU9sI5/
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan