smokeloader | f44b7312b9dffecbcec3f0ac7482f20aa9dcb813bb40b239e311c48dfc4dba91 | Triage

Sharing

General

Target

f44b7312b9dffecbcec3f0ac7482f20aa9dcb813bb40b239e311c48dfc4dba91
Size

328KB
Sample

241108-r2vtqsthkj
MD5

aa65fca5eaa866899edd35a0a21d0577
SHA1

7d8dd63b9f4d7be45b9caf4c7d662ecaa3abbdba
SHA256

f44b7312b9dffecbcec3f0ac7482f20aa9dcb813bb40b239e311c48dfc4dba91
SHA512

845ce4bea5ad8f6c03427c421f748bddfd59c6e57600a9e30ad69e65950f4c237204b59aa2016b86f2811489e1260d3b589665140666936b084acd8547fe240a
SSDEEP

6144:sUTPLSjqHp+8Vqwr7MK1DmkBrHr6yIxZ1WqqdSJzJ9:PTPu2+8VqcZpHr6dYST

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  f44b7312b9dffecbcec3f0ac7482f20aa9dcb813bb40b239e311c48dfc4dba91
- Size
  
  328KB
- MD5
  
  aa65fca5eaa866899edd35a0a21d0577
- SHA1
  
  7d8dd63b9f4d7be45b9caf4c7d662ecaa3abbdba
- SHA256
  
  f44b7312b9dffecbcec3f0ac7482f20aa9dcb813bb40b239e311c48dfc4dba91
- SHA512
  
  845ce4bea5ad8f6c03427c421f748bddfd59c6e57600a9e30ad69e65950f4c237204b59aa2016b86f2811489e1260d3b589665140666936b084acd8547fe240a
- SSDEEP
  
  6144:sUTPLSjqHp+8Vqwr7MK1DmkBrHr6yIxZ1WqqdSJzJ9:PTPu2+8VqcZpHr6dYST
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan