smokeloader | 27ea2b1442a58da57613526cf943e783ae0026a5855bf8c5896cc664dbd38f79 | Triage

Sharing

General

Target

27ea2b1442a58da57613526cf943e783ae0026a5855bf8c5896cc664dbd38f79
Size

140KB
Sample

241110-q1xfhaxglp
MD5

594f5f1d753d5551db1d70ecb83726dc
SHA1

c392038a9683e664324b24dcdedf3e9a683a41b0
SHA256

27ea2b1442a58da57613526cf943e783ae0026a5855bf8c5896cc664dbd38f79
SHA512

bbf3a77d2de00383a1cea5d1e8470afcdf84cdd42a2b73e3611a46c4c3d50f4de07a1abbe58a32bad17e5e7e4851d890eca57510bb3f9521b6a1b23d7d9692d5
SSDEEP

3072:3E1ThCoLxibnxrXa0rsHN329WmAM9M7WwBfcj9DN:32Co9gxL2HN3w79M6wBmDN

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  910d06f56e2555898e69f7be2539dc65d73f001a8db00158ea9cbc51b93101cc
- Size
  
  226KB
- MD5
  
  230c0833ffd0aa51aec7f36339ee4044
- SHA1
  
  02aac32dacd8e3ca0acaf141376fa86a604dcd85
- SHA256
  
  910d06f56e2555898e69f7be2539dc65d73f001a8db00158ea9cbc51b93101cc
- SHA512
  
  36dbacd4ffc7632e5cab87f6e1c148811f1d6606d7d68614b6e6c37ecd287c9e937db65e6aba3ba2b1afbda2c0d630706606da1af8acf18ea0621ddc841cd26a
- SSDEEP
  
  3072:sDYxLf5gT5wc5/xHPeY5spY0KWmH6ki9JzBicO5cauDtqVmmthkNf/ln:HLfaDZHR5sIWkDCBicOSaMtemmtGr
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan