Overview

overview

10

Static

static

3586438283...e8.exe

windows10_x64

10

Resubmissions

23/01/2022, 15:53

220123-tbzq4sgbf610

23/01/2022, 15:53

220123-tbqs7sgbbn1

18/01/2022, 08:19

220118-j7wdfsadhk10

Sharing

Copy URL Twitter E-mail

General

  • Target
    35864382833fc66855d298379af2a9e8.exe
  • Size 294KB
  • Sample220123-tbzq4sgbf6
  • SHA256 b7ce418c53baa2aaf76c92f5bcc41f00f54976dbf12145d26e4ded625b78a5a0
  • MD5 SHA1 SHA512
Score
10/10
smokeloaderbackdoortrojan

Malware Config

Extracted

Family

  • smokeloader

Version

  • 2020

C2

  • http://host-data-coin-11.com/

  • http://file-coin-host-12.com/

rc4.i32
rc4.i32

Targets

    • Target
      35864382833fc66855d298379af2a9e8.exe
    • Size 294KB
    • SHA256 b7ce418c53baa2aaf76c92f5bcc41f00f54976dbf12145d26e4ded625b78a5a0
    • MD5 SHA1 SHA512
    Score
    10/10
    smokeloaderbackdoortrojan

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks