smokeloader | 6f54181807e2995147e132e7bf87ed669966b4f68a49b29fdaf4467864aa946a | Triage

Sharing

General

Target

JaffaCakes118_fe2a170c403e99115e30dd615f848a3c
Size

333KB
Sample

250111-l339lsykgr
MD5

fe2a170c403e99115e30dd615f848a3c
SHA1

0170400caa176e1035f153afac061e0364f34e02
SHA256

6f54181807e2995147e132e7bf87ed669966b4f68a49b29fdaf4467864aa946a
SHA512

db70fe04c355bf0206ce835cae88f50c65a84f99bf41b51e0f73aab39ba1662d80de683cc78d1ed17bdbef85a7aadf65f618318a3b55755b2ade42aad44e6486
SSDEEP

6144:8wCLYl9IPb8BlslQl0RkP1NKmT2Y/31dJMsz1zX3mRv9x10:8nM9Iz8BL0SdND/31dJx1znmf

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_fe2a170c403e99115e30dd615f848a3c
- Size
  
  333KB
- MD5
  
  fe2a170c403e99115e30dd615f848a3c
- SHA1
  
  0170400caa176e1035f153afac061e0364f34e02
- SHA256
  
  6f54181807e2995147e132e7bf87ed669966b4f68a49b29fdaf4467864aa946a
- SHA512
  
  db70fe04c355bf0206ce835cae88f50c65a84f99bf41b51e0f73aab39ba1662d80de683cc78d1ed17bdbef85a7aadf65f618318a3b55755b2ade42aad44e6486
- SSDEEP
  
  6144:8wCLYl9IPb8BlslQl0RkP1NKmT2Y/31dJMsz1zX3mRv9x10:8nM9Iz8BL0SdND/31dJx1znmf
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan