smokeloader | 1c80d05bebef4289e139aead2c668a0a43dc197082c140365b34079ee412c4c8 | Triage

Sharing

General

Target

1c80d05bebef4289e139aead2c668a0a43dc197082c140365b34079ee412c4c8
Size

153KB
Sample

241215-q75epaxrem
MD5

f9386f04da85621865910e83345e6472
SHA1

695ad40da47b2f9457221bc5dba0d6bd271cd61f
SHA256

1c80d05bebef4289e139aead2c668a0a43dc197082c140365b34079ee412c4c8
SHA512

c8930c7c3f5ea4935aeaed5dff1b1c48a935bb2786793ee30eb938cefdbe9377cf17ef4ebf83c073d52004108fa54744d2101b9a254c924816f04c74bafafadd
SSDEEP

3072:I3SFq7MCj9Yl2k+0mTwZr/PfqLTTDefwHUNeI5UcAzy9qT9A9Jj0Vb7pTDW:fFq9MXE4rCLPDeLNedTG0i

Score

10^/10

smokeloader 2023 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Targets

- Target
  
  867265681c37f48c1a4c6a915a9e7902c7255e4b2c18c56a55a2628aff12201b
- Size
  
  234KB
- MD5
  
  92c157e722f62b100e00f833a23c09a9
- SHA1
  
  573cf33c99f6a2af5e63496a4c19e43e4c37b8cd
- SHA256
  
  867265681c37f48c1a4c6a915a9e7902c7255e4b2c18c56a55a2628aff12201b
- SHA512
  
  190f9c88c6170ca55ba770a1655474c719a3f601e6cc32f2514ae291ddcf6057a1c0645715af3b22f0f4253bfcba9c3f2e9cd92a02b2a56c6894e2977f77f303
- SSDEEP
  
  3072:CZ/yGPLpYkoapdZ45wZqb7+IBXf8x3rHaz2NiruK2qhXJ2v40T2ui7le6:I/HLsapdhYBv8xb60NKMv9T2lhe6
Score

10^/10

smokeloader 2023 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader2023backdoortrojan

behavioral2

smokeloader2023backdoordiscoverytrojan