smokeloader | ba631a7a096c982d286ad269b2cff3e81098626bbb5936decd3c16bad8b5d9bd | Triage

Sharing

General

Target

ba631a7a096c982d286ad269b2cff3e81098626bbb5936decd3c16bad8b5d9bd
Size

1006KB
Sample

240830-cf43ystcrq
MD5

6cd1f21e9a9f22eddc9eac22f1a1615c
SHA1

3d15589a5416169850238d90a2309e33d388d83f
SHA256

ba631a7a096c982d286ad269b2cff3e81098626bbb5936decd3c16bad8b5d9bd
SHA512

f1f9721fb7b895599eeaad236ac5acb4da88ef062654a887f1acbd803824a4e4b2d6d2ae32b804c60fcfb7d2a1d1623d7377116a0d76e592fae379ba73da42be
SSDEEP

24576:N6iNCoWTeS9oDhR6DPCbTgwMfUC8RN1vIlY/Qn1P:NPlS9oDhR/bAULhg

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  ba631a7a096c982d286ad269b2cff3e81098626bbb5936decd3c16bad8b5d9bd
- Size
  
  1006KB
- MD5
  
  6cd1f21e9a9f22eddc9eac22f1a1615c
- SHA1
  
  3d15589a5416169850238d90a2309e33d388d83f
- SHA256
  
  ba631a7a096c982d286ad269b2cff3e81098626bbb5936decd3c16bad8b5d9bd
- SHA512
  
  f1f9721fb7b895599eeaad236ac5acb4da88ef062654a887f1acbd803824a4e4b2d6d2ae32b804c60fcfb7d2a1d1623d7377116a0d76e592fae379ba73da42be
- SSDEEP
  
  24576:N6iNCoWTeS9oDhR6DPCbTgwMfUC8RN1vIlY/Qn1P:NPlS9oDhR/bAULhg
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2