smokeloader | dd4979e886bd46b6a5c618eb78b4525f36d3fa6ea9c6abb14e42ffa177a46ced | Triage™

Login
Reports

Overview

overview

Static

static

3

dd4979e886...ed.exe

windows7-x64

dd4979e886...ed.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
dd4979e886bd46b6a5c618eb78b4525f36d3fa6ea9c6abb14e42ffa177a46ced.exe
Size 909KB
Sample231213-x4pcmaaah9
SHA256 dd4979e886bd46b6a5c618eb78b4525f36d3fa6ea9c6abb14e42ffa177a46ced
MD5 dfd8798cfe88efc66b69d0be9671d323
SHA1 681208a9da99e1af723e9d55f0222443c0e3a69c
SHA512 d922e3b66b0c36984480b6a034956da0cbb5d72581517d632bbe6dad2be5742af93de792cdbe5aa61926faae37c5cb1ea97c6e847c42a12687ba008dfd94fb27
SSDEEP 12288:oH1HR7Fa2dALbyZa5uHZfT6SQxDmh1nDm2yW+IcukidPGn:IE2dALbyZa5uHJ05mh1Vp
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smokeloader backdoor trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

dd4979e886bd46b6a5c618eb78b4525f36d3fa6ea9c6abb14e42ffa177a46ced.exe

Resource

win7-20231023-en

windows7-x64

9 signatures

150 seconds

smokeloader backdoor trojan

Behavioral task

behavioral2

Sample

dd4979e886bd46b6a5c618eb78b4525f36d3fa6ea9c6abb14e42ffa177a46ced.exe

Resource

win10v2004-20231127-en

windows10-2004-x64

8 signatures

150 seconds

smokeloader backdoor trojan

Malware Config

Extracted

Family

smokeloader

Version

2022

C2

http://77.91.68.29/fks/

rc4.i32

rc4.i32

Targets

- Target
  dd4979e886bd46b6a5c618eb78b4525f36d3fa6ea9c6abb14e42ffa177a46ced.exe
- Size 909KB
- SHA256 dd4979e886bd46b6a5c618eb78b4525f36d3fa6ea9c6abb14e42ffa177a46ced
- MD5 dfd8798cfe88efc66b69d0be9671d323
- SHA1 681208a9da99e1af723e9d55f0222443c0e3a69c
- SHA512 d922e3b66b0c36984480b6a034956da0cbb5d72581517d632bbe6dad2be5742af93de792cdbe5aa61926faae37c5cb1ea97c6e847c42a12687ba008dfd94fb27
- SSDEEP 12288:oH1HR7Fa2dALbyZa5uHZfT6SQxDmh1nDm2yW+IcukidPGn:IE2dALbyZa5uHJ05mh1Vp
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan

© 2018-2026

Terms | Privacy