smokeloader | e06e29c7bb743843df55bba7478f50dcf4b9dc84d904658c17aeed40a131d515 | Triage

Sharing

General

Target

e06e29c7bb743843df55bba7478f50dcf4b9dc84d904658c17aeed40a131d515
Size

237KB
Sample

241108-3ym59ssfqr
MD5

85592ab05cb4012aba6680a4e11f66bd
SHA1

0ae3c73910ba12ddecc4ab2e56776a6a5c2ac508
SHA256

e06e29c7bb743843df55bba7478f50dcf4b9dc84d904658c17aeed40a131d515
SHA512

66e15b9db16089b6089ca0199823290ab2e9f437ecbb523a762b758f9e4663127375529071b6f84ec7eec234f829b35b4afdc675ac4c7e2a94961d97577c9b09
SSDEEP

3072:63ttghV5pCFBXFJ1Q4rHv2sRdJ6qgjDvdI3jY67k7IxSZTpYFoWUS2yPcNfzsYR0:63ttgZQF99z2sR/63jhAs3YfAy9GGNz

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  e06e29c7bb743843df55bba7478f50dcf4b9dc84d904658c17aeed40a131d515
- Size
  
  237KB
- MD5
  
  85592ab05cb4012aba6680a4e11f66bd
- SHA1
  
  0ae3c73910ba12ddecc4ab2e56776a6a5c2ac508
- SHA256
  
  e06e29c7bb743843df55bba7478f50dcf4b9dc84d904658c17aeed40a131d515
- SHA512
  
  66e15b9db16089b6089ca0199823290ab2e9f437ecbb523a762b758f9e4663127375529071b6f84ec7eec234f829b35b4afdc675ac4c7e2a94961d97577c9b09
- SSDEEP
  
  3072:63ttghV5pCFBXFJ1Q4rHv2sRdJ6qgjDvdI3jY67k7IxSZTpYFoWUS2yPcNfzsYR0:63ttgZQF99z2sR/63jhAs3YfAy9GGNz
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan