smokeloader | 07523a9d4656e566c37f787bcf15a1a539e41fe5ed40b5b77865b484a1d87d68 | Triage

Sharing

General

Target

07523a9d4656e566c37f787bcf15a1a539e41fe5ed40b5b77865b484a1d87d68
Size

252KB
Sample

241215-rkeq7aymej
MD5

13aef0c6305d9c17e4ad0ba7007fbab6
SHA1

7c9866189996a90114fdd6e3a74efd847276ffa8
SHA256

07523a9d4656e566c37f787bcf15a1a539e41fe5ed40b5b77865b484a1d87d68
SHA512

35b19a5f791d8ffe18919622f0cbf96a83ba57e7bd337f3287c2b00eef1e90913ced533609be8ac448e5a71ca8e8e27d0a4710f75a3fe55da63219da1fe9bdfc
SSDEEP

3072:GZeGlWSnL9evCCV1SHTaCJbAIYImxhtAjAcsxkgaBChUpZa9uD6Vdyhk:RGsa9evCCVIH2CFcD9mA5iga3wVf

Score

10^/10

smokeloader 0009 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

0009

Targets

- Target
  
  07523a9d4656e566c37f787bcf15a1a539e41fe5ed40b5b77865b484a1d87d68
- Size
  
  252KB
- MD5
  
  13aef0c6305d9c17e4ad0ba7007fbab6
- SHA1
  
  7c9866189996a90114fdd6e3a74efd847276ffa8
- SHA256
  
  07523a9d4656e566c37f787bcf15a1a539e41fe5ed40b5b77865b484a1d87d68
- SHA512
  
  35b19a5f791d8ffe18919622f0cbf96a83ba57e7bd337f3287c2b00eef1e90913ced533609be8ac448e5a71ca8e8e27d0a4710f75a3fe55da63219da1fe9bdfc
- SSDEEP
  
  3072:GZeGlWSnL9evCCV1SHTaCJbAIYImxhtAjAcsxkgaBChUpZa9uD6Vdyhk:RGsa9evCCVIH2CFcD9mA5iga3wVf
Score

10^/10

smokeloader 0009 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader0009backdoordiscoverytrojan

behavioral2

smokeloader0009backdoordiscoverytrojan