smokeloader | ba145aa9cd5a74b9f49f8ce590ad18899bc464643f00d792e01a68d44cee10ca | Triage

Sharing

General

Target

ba145aa9cd5a74b9f49f8ce590ad18899bc464643f00d792e01a68d44cee10ca
Size

211KB
Sample

241109-sp6adaxapg
MD5

62fee168bc22f7d0c3b73eb0ef1ac49d
SHA1

cbb732eb9c73c15386afe23317aa0176ab236aea
SHA256

ba145aa9cd5a74b9f49f8ce590ad18899bc464643f00d792e01a68d44cee10ca
SHA512

1c84fb7f5adb7f1ab1ae90a32f44977c84a4f6620bc77ff4580c419fdc80a3a5d551c65b93f09722ac1610fe8c367d92ef6d53429174c415e0b5d5a5d5c00cbb
SSDEEP

3072:VbWoSdUCtu9MUy4xk2Q5Jco4RxJEPSvnARgYzbHOAg0FujDs55OaXUZCzRbNP/Ct:VqogFu6U3xkxaRHEF+AOlaXUZgDXC

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  ba145aa9cd5a74b9f49f8ce590ad18899bc464643f00d792e01a68d44cee10ca
- Size
  
  211KB
- MD5
  
  62fee168bc22f7d0c3b73eb0ef1ac49d
- SHA1
  
  cbb732eb9c73c15386afe23317aa0176ab236aea
- SHA256
  
  ba145aa9cd5a74b9f49f8ce590ad18899bc464643f00d792e01a68d44cee10ca
- SHA512
  
  1c84fb7f5adb7f1ab1ae90a32f44977c84a4f6620bc77ff4580c419fdc80a3a5d551c65b93f09722ac1610fe8c367d92ef6d53429174c415e0b5d5a5d5c00cbb
- SSDEEP
  
  3072:VbWoSdUCtu9MUy4xk2Q5Jco4RxJEPSvnARgYzbHOAg0FujDs55OaXUZCzRbNP/Ct:VqogFu6U3xkxaRHEF+AOlaXUZgDXC
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan