smokeloader | f57f9d50d34879bbfaec48a2d4bb9d585feea44db4230e9983850b864ad57560 | Triage

Sharing

General

Target

f57f9d50d34879bbfaec48a2d4bb9d585feea44db4230e9983850b864ad57560
Size

279KB
Sample

241104-xracyavkgs
MD5

24b909bc00bd277dec06ff5094e4dbb8
SHA1

1a23038276c06aed9e42d0b6732a46c909a94c4f
SHA256

f57f9d50d34879bbfaec48a2d4bb9d585feea44db4230e9983850b864ad57560
SHA512

7678a6044cf437fdd24d54fcc003c8e26ef760da1b9ec05a10a1bf9ac8daa2d5eff88eefda76d83776b23bb3b9a22240a8a636c6c5fbb43a97a2b12ff2a1045f
SSDEEP

6144:EdUz2Eq9NjhIXiyljL+XXSaY8FWYBPsWqH8xfvg:dz2Eq9JhIXiyljL+ypDYdFwgvg

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  f57f9d50d34879bbfaec48a2d4bb9d585feea44db4230e9983850b864ad57560
- Size
  
  279KB
- MD5
  
  24b909bc00bd277dec06ff5094e4dbb8
- SHA1
  
  1a23038276c06aed9e42d0b6732a46c909a94c4f
- SHA256
  
  f57f9d50d34879bbfaec48a2d4bb9d585feea44db4230e9983850b864ad57560
- SHA512
  
  7678a6044cf437fdd24d54fcc003c8e26ef760da1b9ec05a10a1bf9ac8daa2d5eff88eefda76d83776b23bb3b9a22240a8a636c6c5fbb43a97a2b12ff2a1045f
- SSDEEP
  
  6144:EdUz2Eq9NjhIXiyljL+XXSaY8FWYBPsWqH8xfvg:dz2Eq9JhIXiyljL+ypDYdFwgvg
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan