smokeloader | b5d18b0e5a10547b8b4970fc47228b49931cbceacd79161e171666a4faecfc46 | Triage

Sharing

General

Target

b5d18b0e5a10547b8b4970fc47228b49931cbceacd79161e171666a4faecfc46
Size

377KB
Sample

241111-ks7nlsxcme
MD5

b9f42d1d535ff907d683ea7bbf58ef34
SHA1

3117e78532266abf29d4780a88d44e9b87c29ad2
SHA256

b5d18b0e5a10547b8b4970fc47228b49931cbceacd79161e171666a4faecfc46
SHA512

4f5717d5634c7183e56ba48068497f8161070144f04340a30db52c7b8a6479f292c3a2b195dcfbc5f2783f6159e9c2cd1bbc7ffaf45b0058cd3983c9767d0201
SSDEEP

6144:ru6rZozdLRxniPRwgs2m1s3BYhlhNhl7187fDWcoBlCVPrU4aV:ruOZKdNxnWBI1s3qhl/z7O+cWCj

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  b5d18b0e5a10547b8b4970fc47228b49931cbceacd79161e171666a4faecfc46
- Size
  
  377KB
- MD5
  
  b9f42d1d535ff907d683ea7bbf58ef34
- SHA1
  
  3117e78532266abf29d4780a88d44e9b87c29ad2
- SHA256
  
  b5d18b0e5a10547b8b4970fc47228b49931cbceacd79161e171666a4faecfc46
- SHA512
  
  4f5717d5634c7183e56ba48068497f8161070144f04340a30db52c7b8a6479f292c3a2b195dcfbc5f2783f6159e9c2cd1bbc7ffaf45b0058cd3983c9767d0201
- SSDEEP
  
  6144:ru6rZozdLRxniPRwgs2m1s3BYhlhNhl7187fDWcoBlCVPrU4aV:ruOZKdNxnWBI1s3qhl/z7O+cWCj
Score

10^/10

smokeloader 2023 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoordiscoverytrojan

behavioral2

smokeloader2023backdoordiscoverytrojan