smokeloader | 39d1c252463be538d53e36a9a1e5dca56f1b12271ca770807cc2fbf20007dcb3 | Triage

Sharing

General

Target

39d1c252463be538d53e36a9a1e5dca56f1b12271ca770807cc2fbf20007dcb3
Size

264KB
Sample

241110-3t6f2sxfnl
MD5

24663115402c0ede1e343e2fe04ea243
SHA1

20a731dba591f95dc9e021d8139adf0d46fce135
SHA256

39d1c252463be538d53e36a9a1e5dca56f1b12271ca770807cc2fbf20007dcb3
SHA512

97bc05cf7726ad9d3645146a483942a3f1fd87617f61ca11c1250226927680f76cde2cfc5d7412ee4b20284402d221cec73640bb52df0ece01ff166f7db2c415
SSDEEP

3072:Sa+a1YfDFBdxeYJMdHz7wGy63xse/to4Hh7IxSAE6pAkaTADQIk2PrLl9KkpzRNc:SaaLFBPCdHz7L/Sgt0AoQIJX9VRu

Score

10^/10

smokeloader 7777 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

7777

Targets

- Target
  
  39d1c252463be538d53e36a9a1e5dca56f1b12271ca770807cc2fbf20007dcb3
- Size
  
  264KB
- MD5
  
  24663115402c0ede1e343e2fe04ea243
- SHA1
  
  20a731dba591f95dc9e021d8139adf0d46fce135
- SHA256
  
  39d1c252463be538d53e36a9a1e5dca56f1b12271ca770807cc2fbf20007dcb3
- SHA512
  
  97bc05cf7726ad9d3645146a483942a3f1fd87617f61ca11c1250226927680f76cde2cfc5d7412ee4b20284402d221cec73640bb52df0ece01ff166f7db2c415
- SSDEEP
  
  3072:Sa+a1YfDFBdxeYJMdHz7wGy63xse/to4Hh7IxSAE6pAkaTADQIk2PrLl9KkpzRNc:SaaLFBPCdHz7L/Sgt0AoQIJX9VRu
Score

10^/10

smokeloader 7777 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader7777backdoordiscoverytrojan

behavioral2

smokeloader7777backdoordiscoverytrojan