smokeloader | 4fedb0b25dc9687a013d419cbad46c7b12da234b598d9cddc7a12631ea2e0096 | Triage

Sharing

General

Target

4fedb0b25dc9687a013d419cbad46c7b12da234b598d9cddc7a12631ea2e0096
Size

187KB
Sample

241108-hdwlpaxflb
MD5

d7c522092dae53650c875d30e70ddb15
SHA1

3baa86e61ba52b3e054b421f9c02625ea249c887
SHA256

4fedb0b25dc9687a013d419cbad46c7b12da234b598d9cddc7a12631ea2e0096
SHA512

8c0bd3ab4dafec41a2bfa61e43ca9a5778b078320eb58de7e937d13ceaa90854e7bc22455be5f6c4b90b657d9e625788e6a7faa1226c2e866948f9789d1b9399
SSDEEP

3072:ZFRJLmeMvbQi5zz+zxfK7cMoOZRVDYNVV9A/b3ZhyF:XLSvcS+FPWDiVV9A/bri

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  4fedb0b25dc9687a013d419cbad46c7b12da234b598d9cddc7a12631ea2e0096
- Size
  
  187KB
- MD5
  
  d7c522092dae53650c875d30e70ddb15
- SHA1
  
  3baa86e61ba52b3e054b421f9c02625ea249c887
- SHA256
  
  4fedb0b25dc9687a013d419cbad46c7b12da234b598d9cddc7a12631ea2e0096
- SHA512
  
  8c0bd3ab4dafec41a2bfa61e43ca9a5778b078320eb58de7e937d13ceaa90854e7bc22455be5f6c4b90b657d9e625788e6a7faa1226c2e866948f9789d1b9399
- SSDEEP
  
  3072:ZFRJLmeMvbQi5zz+zxfK7cMoOZRVDYNVV9A/b3ZhyF:XLSvcS+FPWDiVV9A/bri
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2