smokeloader | 7d19781a1e0fdd709adee4d287efd36dfac7cd96194eec36af359d3691c52ab9 | Triage

Sharing

General

Target

7d19781a1e0fdd709adee4d287efd36dfac7cd96194eec36af359d3691c52ab9
Size

148KB
Sample

241111-c2y4ts1dlf
MD5

ad2c8de74c7252faa040a4096c0c620e
SHA1

a574ca725250020869f22a699e6fb9ff3cee2eb1
SHA256

7d19781a1e0fdd709adee4d287efd36dfac7cd96194eec36af359d3691c52ab9
SHA512

c4d8da1378d62edd63375209bf3f79919b0c6faaa981a337133c52d66aaa5da258c80afd2d550267a7b04c9a174ce5b592aee61794fad0764a7229bb4786bab7
SSDEEP

3072:PU62I3fBCnX/vhGrKpzhL0699mvN52AVKbYPLT2RcTTteMxaIFHHFP3:c6reviKhhL79IvrE8LT6cTTteMxn

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  d91dc1d99dc2e79cc4fac2ab1a9a3d69626cb566b619998206154bf0d128bf64.exe
- Size
  
  252KB
- MD5
  
  c0763d4218f74bf7188d9af119288c4b
- SHA1
  
  11ab36565dbd4a336702fc7e19375bf279f6418f
- SHA256
  
  d91dc1d99dc2e79cc4fac2ab1a9a3d69626cb566b619998206154bf0d128bf64
- SHA512
  
  be31213bf28b037448447e9c66d5c23eac32cb528bdb95be0ff4f7d4587ca537d86ecd3a27ac789648f51fac9a42c5772db5b0c1f08bc3a85e55b7755f3283ef
- SSDEEP
  
  3072:FogH+TLIFDaxRH32/LIU1AYYKhoYBZYZf1ZhtsfpEUBvSb95Ptb1XlhHo:CLLDxRHyIU1gIo7Zf8pElvXL
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan