smokeloader | 4c01d44656e84d5b6a3fb681d5cca1cec93eb701fdb0931ccdaa28e305b2330e | Triage

Sharing

General

Target

4c01d44656e84d5b6a3fb681d5cca1cec93eb701fdb0931ccdaa28e305b2330e
Size

139KB
Sample

241108-rtl7masrds
MD5

a952569ccfada30a58d573b8776730ef
SHA1

4deb1d329d211f7b667b25ead149ab9df2c3f737
SHA256

4c01d44656e84d5b6a3fb681d5cca1cec93eb701fdb0931ccdaa28e305b2330e
SHA512

5c74e6df3199cadfc0c5a2d0ed40d6a6c28e58cc10e57bc2a5a7d76059f533aba40251467798351870e07fcbd14d34f0fa0199a12ea3a2373df96ee5ebdec733
SSDEEP

3072:7yr8bcUau0ECFIV10+RVyh31b+JkqVeTfpTxpDZPy59:7x6BF+0ek6JFeTfpp6D

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  8dd5ec6332a698f00b2feb4b74fcf185a6905bce3e18bd998d1ea8ba0e354525
- Size
  
  231KB
- MD5
  
  eabaf86be2fa999dfada34f3c9e53c99
- SHA1
  
  6a41e2a4452a19631b9ccac17496df40f867f6ec
- SHA256
  
  8dd5ec6332a698f00b2feb4b74fcf185a6905bce3e18bd998d1ea8ba0e354525
- SHA512
  
  c87b2ef8f7a914185f96836c6a5f6c36d3c3ebb771e934f81d4119df8659e3301775ae4bd59215817c11676ddffb221b7793802ebff7f8124f26058a10556f38
- SSDEEP
  
  3072:TFciL5TkXE5HLjQO69QHD/PjoZBFp50dtJ//894w7RkxmJZs:T/L54XILkbQgZjkrJ/kmGymI
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan