smokeloader | 428fd5ec28a5a8e2f2cf2cf183ae79779d72ea0e4805d66179fbf100b847f51d | Triage

Sharing

General

Target

428fd5ec28a5a8e2f2cf2cf183ae79779d72ea0e4805d66179fbf100b847f51d
Size

211KB
Sample

241105-15kydazckc
MD5

c14ed8f7874f6acf7a9362d59fc1b238
SHA1

c594b2df74864e5c04084647f76c351c531973c7
SHA256

428fd5ec28a5a8e2f2cf2cf183ae79779d72ea0e4805d66179fbf100b847f51d
SHA512

935c4772c2ea603d2bb24eecf80054654aece95095d57fa7fb3afe9b7d9344f8ab0d65a3d938a32fdb901aafdebfd37c97ba68fd3d49409b045f4bd278fd871a
SSDEEP

6144:2qogFu6U3xkxaRHEF+AOLHvvt4pYg5XC:2qzFuTxBEKgJC

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  428fd5ec28a5a8e2f2cf2cf183ae79779d72ea0e4805d66179fbf100b847f51d
- Size
  
  211KB
- MD5
  
  c14ed8f7874f6acf7a9362d59fc1b238
- SHA1
  
  c594b2df74864e5c04084647f76c351c531973c7
- SHA256
  
  428fd5ec28a5a8e2f2cf2cf183ae79779d72ea0e4805d66179fbf100b847f51d
- SHA512
  
  935c4772c2ea603d2bb24eecf80054654aece95095d57fa7fb3afe9b7d9344f8ab0d65a3d938a32fdb901aafdebfd37c97ba68fd3d49409b045f4bd278fd871a
- SSDEEP
  
  6144:2qogFu6U3xkxaRHEF+AOLHvvt4pYg5XC:2qzFuTxBEKgJC
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan