smokeloader | fff0fecf9639148a95a39b9763361c1f3ceb2d4a54bce118b1c357504db6b9d8 | Triage

Sharing

General

Target

fff0fecf9639148a95a39b9763361c1f3ceb2d4a54bce118b1c357504db6b9d8.exe
Size

927KB
Sample

241125-dqhhdavrds
MD5

5d99042376131355be8579bd56100a82
SHA1

7cab6bbd33fbb030fc78b81466a387a1921d8dad
SHA256

fff0fecf9639148a95a39b9763361c1f3ceb2d4a54bce118b1c357504db6b9d8
SHA512

a168a70e6ff710b822d302579d8226901b637fdb1938b4a4846d8010572b2349abc3664aafff21366f3f6fa7957455ca5fa95a418ca674ca8442d6705d45acc7
SSDEEP

24576:ukflyeoU8Ltpl+RE8FUvvw8j1mDdoBNYbRbsJ:ffcU8LARE8FUv5mDqY9b

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  fff0fecf9639148a95a39b9763361c1f3ceb2d4a54bce118b1c357504db6b9d8.exe
- Size
  
  927KB
- MD5
  
  5d99042376131355be8579bd56100a82
- SHA1
  
  7cab6bbd33fbb030fc78b81466a387a1921d8dad
- SHA256
  
  fff0fecf9639148a95a39b9763361c1f3ceb2d4a54bce118b1c357504db6b9d8
- SHA512
  
  a168a70e6ff710b822d302579d8226901b637fdb1938b4a4846d8010572b2349abc3664aafff21366f3f6fa7957455ca5fa95a418ca674ca8442d6705d45acc7
- SSDEEP
  
  24576:ukflyeoU8Ltpl+RE8FUvvw8j1mDdoBNYbRbsJ:ffcU8LARE8FUv5mDqY9b
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan