smokeloader | d9e4efa5c3e0da2102ff89eb23e3f8823415e44ea188de121e058a08581c6d18 | Triage

Sharing

General

Target

d9e4efa5c3e0da2102ff89eb23e3f8823415e44ea188de121e058a08581c6d18
Size

333KB
Sample

241110-mt19bsykdq
MD5

01c47eff4f794ebd0d091822c8dca382
SHA1

e694d769dbeb3ba5ed69744508f8669199751fe1
SHA256

d9e4efa5c3e0da2102ff89eb23e3f8823415e44ea188de121e058a08581c6d18
SHA512

d28b7ddd8006dff0ae2ef4421565118ebb97da2a3c9918b7a4e371bd433679ccfd2a68e2795ea9050765b407885a3c10fa80d323d7e00e86ae20d324c3b92578
SSDEEP

6144:QOxLx93QnGc3sJUh9N5Q2embh+D9nq2jiyfflL0cfQXPX3E5qp:QkIGc3sJUh/embIBndfflL0BXPHEM

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  d9e4efa5c3e0da2102ff89eb23e3f8823415e44ea188de121e058a08581c6d18
- Size
  
  333KB
- MD5
  
  01c47eff4f794ebd0d091822c8dca382
- SHA1
  
  e694d769dbeb3ba5ed69744508f8669199751fe1
- SHA256
  
  d9e4efa5c3e0da2102ff89eb23e3f8823415e44ea188de121e058a08581c6d18
- SHA512
  
  d28b7ddd8006dff0ae2ef4421565118ebb97da2a3c9918b7a4e371bd433679ccfd2a68e2795ea9050765b407885a3c10fa80d323d7e00e86ae20d324c3b92578
- SSDEEP
  
  6144:QOxLx93QnGc3sJUh9N5Q2embh+D9nq2jiyfflL0cfQXPX3E5qp:QkIGc3sJUh/embIBndfflL0BXPHEM
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan