smokeloader | 8fa53853ac6fceed9468512d43d74c59cf2326ef904feecffd3440f6e6ae441c | Triage

Sharing

General

Target

8fa53853ac6fceed9468512d43d74c59cf2326ef904feecffd3440f6e6ae441c
Size

136KB
Sample

241107-sce8estmew
MD5

b893b3513e6634e015cabf80bff5d9d1
SHA1

e0b7893461a3d4a00ad08557f29ac226728cdd5a
SHA256

8fa53853ac6fceed9468512d43d74c59cf2326ef904feecffd3440f6e6ae441c
SHA512

841427da17c5097d4c7b786235fb789d4555c77ae0847dc571ac9ab8bf86d00935ce013e6dd8e87b75364c72ff3f23b9867f2c3aa794ccf636fa0b2a3c818b4a
SSDEEP

3072:oaSSuMQ2p0SX80iKy3rIz0Mkth9sI0O6dS9+y9vaYlUFJ7F1GIkrndwuT:oWw80Ss0iKmr289chEl8P1dkrdDT

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  b40cf8e538f2c6e214fd1393f9fc5d556a91e6e49d7fc3a855e10b29c69fb185
- Size
  
  224KB
- MD5
  
  d769e9b86721acecef2b65647405415b
- SHA1
  
  bb80cf7977ef76ed31e14aac83ff2c66585e5355
- SHA256
  
  b40cf8e538f2c6e214fd1393f9fc5d556a91e6e49d7fc3a855e10b29c69fb185
- SHA512
  
  7ed3cd2172f8c31a2116b003ee567379e612b0cceb26b2cfc70021079a8d49e93f1a270b27e166d187d8b11c819a6cd346464c6ceae9b2cfd8ab7066de73b54f
- SSDEEP
  
  3072:+KaLDoma5+JWwE7GGewhlriXLiexOmDYg0gdx+eNwD3tdmdhxH:ILEm3kS8WXZxXpxtNi3tm
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan