smokeloader | ab98884a05fa8f1496c775d4a8ac6a55a59a0de59d818ad850aba4bffa7c66fd | Triage

Sharing

General

Target

ab98884a05fa8f1496c775d4a8ac6a55a59a0de59d818ad850aba4bffa7c66fd
Size

211KB
Sample

241107-qtnj1ssmbt
MD5

632083e3a2f177fb1b76e2b8fcee4c75
SHA1

24c9fd7aa7249425074b45f9a6efc857473799e2
SHA256

ab98884a05fa8f1496c775d4a8ac6a55a59a0de59d818ad850aba4bffa7c66fd
SHA512

0d3062bd15586583b35a7b108bffb5c17cb12e701e460444b0473ace2996a0cb8145ec267fb58952fde611c419cef6d3213ebc4baaa4324df16ff48e8cf5cc2e
SSDEEP

3072:ZbWoSdUCtu9MUy4xk2Q5Jco4RxJEPSvnARgYzbHOAg0FujDw5A+bWKp9eCSrW5PK:ZqogFu6U3xkxaRHEF+AO5eWuaW5XC

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  ab98884a05fa8f1496c775d4a8ac6a55a59a0de59d818ad850aba4bffa7c66fd
- Size
  
  211KB
- MD5
  
  632083e3a2f177fb1b76e2b8fcee4c75
- SHA1
  
  24c9fd7aa7249425074b45f9a6efc857473799e2
- SHA256
  
  ab98884a05fa8f1496c775d4a8ac6a55a59a0de59d818ad850aba4bffa7c66fd
- SHA512
  
  0d3062bd15586583b35a7b108bffb5c17cb12e701e460444b0473ace2996a0cb8145ec267fb58952fde611c419cef6d3213ebc4baaa4324df16ff48e8cf5cc2e
- SSDEEP
  
  3072:ZbWoSdUCtu9MUy4xk2Q5Jco4RxJEPSvnARgYzbHOAg0FujDw5A+bWKp9eCSrW5PK:ZqogFu6U3xkxaRHEF+AO5eWuaW5XC
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan