smokeloader | e3500e4d0e7c9d3f1e2eec7e8053276692a40275e0513297eb0958c1a0078189 | Triage

Sharing

General

Target

e3500e4d0e7c9d3f1e2eec7e8053276692a40275e0513297eb0958c1a0078189
Size

139KB
Sample

241107-pzbxqs1qfs
MD5

89106ba1671c979f17aacda9d3113446
SHA1

03e9593d12b9159e51044c3bcae3aa0f794023a8
SHA256

e3500e4d0e7c9d3f1e2eec7e8053276692a40275e0513297eb0958c1a0078189
SHA512

16972a9c321b3d56cce473d9be5705e485f1a05176f799c660523405d4866e28956867ac180c4a823272a1ba603dc8f59f45ebf36a31153d4f5b975b3989bc6d
SSDEEP

3072:2GeTauLT5Emhjd9TliMZlpGCHjJKnIrVSRBE:2nWmhh9Tl3lwCHjwJRBE

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  a0be29370f072a873823b78aa7117cebb78e57130961a997ddebe706b257e20c
- Size
  
  221KB
- MD5
  
  bc0d313f0f73841b3a9300b8bcfc1879
- SHA1
  
  254cdca71d065b1fc0bbaed30de12b0ba57f6c06
- SHA256
  
  a0be29370f072a873823b78aa7117cebb78e57130961a997ddebe706b257e20c
- SHA512
  
  3f7f2769ff8c26f62567107346db30cc207adc946f3c0f5733c8753cbfaad60657cd99d6ccf97e2db7c0f2345eb8f08880fc0ebc5bc81d3c2a0c1d248c195ef3
- SSDEEP
  
  3072:zB7OaLYXRgK7w5eBtJpW0Qa7Ksm0fBfzKm4FiPjR2tJ/aA4yCw7RkxmJZs:9LERg0VBQTa1RmeR4J/aAzCGymI
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan