smokeloader | 09f0b8ceffbf7bc86767f450016da68ab377e62748699b98c4ccdb025afbd25d | Triage

Sharing

General

Target

a3f49b22c773cdeb209154e12dbe3dd0N.exe
Size

939KB
Sample

240903-yq2w8svhqn
MD5

a3f49b22c773cdeb209154e12dbe3dd0
SHA1

31c7cd1e9adc323c25ff1438bbb442ca62f47060
SHA256

09f0b8ceffbf7bc86767f450016da68ab377e62748699b98c4ccdb025afbd25d
SHA512

02097123820eb7b65c70cf1f8b405fc332d793051e339dc8aeed96470a93d30fc31826250f507a3463e3a817f9d6eb9d67191ca8fd2464152e531548002bbaf5
SSDEEP

12288:QKL9xB2pG+wwJMRrxbhxJgSSBBqjwJez9OuVD83fzo7N0DuD3iCJc5IeES1J:pdR+XJMRrxbhxJgSYVwz9OuWvzEhp

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  a3f49b22c773cdeb209154e12dbe3dd0N.exe
- Size
  
  939KB
- MD5
  
  a3f49b22c773cdeb209154e12dbe3dd0
- SHA1
  
  31c7cd1e9adc323c25ff1438bbb442ca62f47060
- SHA256
  
  09f0b8ceffbf7bc86767f450016da68ab377e62748699b98c4ccdb025afbd25d
- SHA512
  
  02097123820eb7b65c70cf1f8b405fc332d793051e339dc8aeed96470a93d30fc31826250f507a3463e3a817f9d6eb9d67191ca8fd2464152e531548002bbaf5
- SSDEEP
  
  12288:QKL9xB2pG+wwJMRrxbhxJgSSBBqjwJez9OuVD83fzo7N0DuD3iCJc5IeES1J:pdR+XJMRrxbhxJgSYVwz9OuWvzEhp
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan