smokeloader | 6c406845dd066abfa4f72ab49e707c97e9a939e7d4a8b5272b366a00d7960177 | Triage

Sharing

General

Target

6c406845dd066abfa4f72ab49e707c97e9a939e7d4a8b5272b366a00d7960177
Size

1.0MB
Sample

240904-zr1w1awdmr
MD5

d9d02eb23a26bbb6d1668e63fb58bc32
SHA1

505aa7071f645584738ef70ac8afb6e3b7714733
SHA256

6c406845dd066abfa4f72ab49e707c97e9a939e7d4a8b5272b366a00d7960177
SHA512

68fb95ddc4abed6bb714a9f56145d250b73dc3a1bf39dbbd85b4ce8e3466fcb07962ec35d43be43f5579a4f11fc175bfa736a866cf8d400523b6dd5402757c8f
SSDEEP

24576:QQlZ3m/UX0C9So4nE+yb4/1EoHBzg2n0anbF:QQlZ3mI0C9S3E+ybQ1EEB0an

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  6c406845dd066abfa4f72ab49e707c97e9a939e7d4a8b5272b366a00d7960177
- Size
  
  1.0MB
- MD5
  
  d9d02eb23a26bbb6d1668e63fb58bc32
- SHA1
  
  505aa7071f645584738ef70ac8afb6e3b7714733
- SHA256
  
  6c406845dd066abfa4f72ab49e707c97e9a939e7d4a8b5272b366a00d7960177
- SHA512
  
  68fb95ddc4abed6bb714a9f56145d250b73dc3a1bf39dbbd85b4ce8e3466fcb07962ec35d43be43f5579a4f11fc175bfa736a866cf8d400523b6dd5402757c8f
- SSDEEP
  
  24576:QQlZ3m/UX0C9So4nE+yb4/1EoHBzg2n0anbF:QQlZ3mI0C9S3E+ybQ1EEB0an
Score

10^/10

discovery smokeloader backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

smokeloaderbackdoordiscoverytrojan