smokeloader | eacc00aeed09ec04d2d345242a9b2049cf7c434f8bb82bb9e2ab52ec699db495 | Triage

Sharing

General

Target

eacc00aeed09ec04d2d345242a9b2049cf7c434f8bb82bb9e2ab52ec699db495
Size

139KB
Sample

241110-y3p37svcjb
MD5

9eb06fe5a8f86e2e5982da1aaaea2738
SHA1

2afb058fe3d98df96ce2b5481fd302fb33c1a1fe
SHA256

eacc00aeed09ec04d2d345242a9b2049cf7c434f8bb82bb9e2ab52ec699db495
SHA512

74ebb3e86b1464681e30282434a29f1d5e8e61a563d6a2c72262abee13168001f65cbb10cabe23aefe2f979e1f621b7449b3b6bcaf6d4bf3fbbb2c35a2f8ac0d
SSDEEP

3072:RORQ2xh8f5GrLNlI4toZ3EWTCy3aO8WWHK:RyQ2xi5CJ/oZ3E+LJ

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  b2259d7d5ddf3a60edaa2c0029bef3d639278866a8e0871cd9aa2cf6c7e8885f.exe
- Size
  
  214KB
- MD5
  
  011daebd8c6218cc56dfb0fbe639768c
- SHA1
  
  5489053e148ca9a3f357b4c3fab37d68b743aada
- SHA256
  
  b2259d7d5ddf3a60edaa2c0029bef3d639278866a8e0871cd9aa2cf6c7e8885f
- SHA512
  
  b3306f2f7aa94e0fe883a485f3b6ff4f63b2dfdab0f26f5cdd6f76a9a52382ebb855c9613ec7a31819a0131d59633b76b04b6477d9c5acbef9e755792dd676ec
- SSDEEP
  
  3072:JET7PLChpX1b50uYi9W51o5S0zCBtBclYXOTsb:+XLSN1NYi9W5zftcwb
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan