smokeloader | 8f76d40108de9e36ed1a41495f3fdd735f1e449f4b5533887e812565a1fbf100 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10-2004-x64

Sharing

General

Target

8f76d40108de9e36ed1a41495f3fdd735f1e449f4b5533887e812565a1fbf100
Size

209KB
Sample

220907-2f7lhsdbc6
MD5

105a913dc5ba304f81ac18103654efa1
SHA1

c2bb00fe4400c62cf2157b850d8a72f02704644a
SHA256

8f76d40108de9e36ed1a41495f3fdd735f1e449f4b5533887e812565a1fbf100
SHA512

71f434323ebff30cc05739244a0ffef0b489fd397ee270da6c5afef5e6670f8c301a0295762e4f797a9535a49100c320872bf28b51c0cf10149655c41b3f9510
SSDEEP

3072:+xuTACOYo2wCimr4RNUp9bcLeK3OuJ5fsrCPI:VsYo2Jr4RgcL9euLW8

Score

10^/10

smokeloader backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

8f76d40108de9e36ed1a41495f3fdd735f1e449f4b5533887e812565a1fbf100.exe

Resource

win10v2004-20220901-en

smokeloader backdoor trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  8f76d40108de9e36ed1a41495f3fdd735f1e449f4b5533887e812565a1fbf100
- Size
  
  209KB
- MD5
  
  105a913dc5ba304f81ac18103654efa1
- SHA1
  
  c2bb00fe4400c62cf2157b850d8a72f02704644a
- SHA256
  
  8f76d40108de9e36ed1a41495f3fdd735f1e449f4b5533887e812565a1fbf100
- SHA512
  
  71f434323ebff30cc05739244a0ffef0b489fd397ee270da6c5afef5e6670f8c301a0295762e4f797a9535a49100c320872bf28b51c0cf10149655c41b3f9510
- SSDEEP
  
  3072:+xuTACOYo2wCimr4RNUp9bcLeK3OuJ5fsrCPI:VsYo2Jr4RgcL9euLW8
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

© 2018-2025

Terms | Privacy