smokeloader | 7d255844e63132dfc3f9ef7cc7a804cd70ae63b5603d165787426e376b18ceff | Triage

Sharing

General

Target

JaffaCakes118_1a6dcf7cd5ef186643666128b073046b
Size

335KB
Sample

250106-kxla6svldm
MD5

1a6dcf7cd5ef186643666128b073046b
SHA1

608e36f9218e01a5051ae2452bbf3afb54b25b11
SHA256

7d255844e63132dfc3f9ef7cc7a804cd70ae63b5603d165787426e376b18ceff
SHA512

40a08c87354cb608bb57cc371847963931b2a8379199332e107ff34e7fa0b4e37cba33cddc15c28538b7ba85db0b7a5ff400929531e185727419fd0ea512b6af
SSDEEP

6144:FuBmh7bTvLFtMmj7a2PVm1Lxo4ho9OwuLd0bHEIKuttkzFwxq+v:FNh7bdtL9PVo1hocLZ0bHE/IOFwgq

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_1a6dcf7cd5ef186643666128b073046b
- Size
  
  335KB
- MD5
  
  1a6dcf7cd5ef186643666128b073046b
- SHA1
  
  608e36f9218e01a5051ae2452bbf3afb54b25b11
- SHA256
  
  7d255844e63132dfc3f9ef7cc7a804cd70ae63b5603d165787426e376b18ceff
- SHA512
  
  40a08c87354cb608bb57cc371847963931b2a8379199332e107ff34e7fa0b4e37cba33cddc15c28538b7ba85db0b7a5ff400929531e185727419fd0ea512b6af
- SSDEEP
  
  6144:FuBmh7bTvLFtMmj7a2PVm1Lxo4ho9OwuLd0bHEIKuttkzFwxq+v:FNh7bdtL9PVo1hocLZ0bHE/IOFwgq
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan