smokeloader | 90cda5da71c1128d5e45801d1b925a2cc062734dd09424abd03fcf2a0a18e3b6 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10-2004-x64

Sharing

General

Target

90cda5da71c1128d5e45801d1b925a2cc062734dd09424abd03fcf2a0a18e3b6
Size

169KB
Sample

220923-e52p8shagk
MD5

2983d77f7d155bbeefc569ac5918ff24
SHA1

8eb9cb9247a6949de1727820e093ccd11af1b2b2
SHA256

90cda5da71c1128d5e45801d1b925a2cc062734dd09424abd03fcf2a0a18e3b6
SHA512

bc76f09738da13e5de510c12ebaaa5cd9c01d0f45ae3ad474dfa2080a2a84ea350d4ddba9733c735cb5a7b8050a56ac699bfc9fd24b3cbe76250e29969fd9605
SSDEEP

3072:aDf8LoQLj54zctG78V0++hoiBCU6/PkWDn:40LfezctG78G

Score

10^/10

smokeloader backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

90cda5da71c1128d5e45801d1b925a2cc062734dd09424abd03fcf2a0a18e3b6.exe

Resource

win10v2004-20220812-en

smokeloader backdoor trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  90cda5da71c1128d5e45801d1b925a2cc062734dd09424abd03fcf2a0a18e3b6
- Size
  
  169KB
- MD5
  
  2983d77f7d155bbeefc569ac5918ff24
- SHA1
  
  8eb9cb9247a6949de1727820e093ccd11af1b2b2
- SHA256
  
  90cda5da71c1128d5e45801d1b925a2cc062734dd09424abd03fcf2a0a18e3b6
- SHA512
  
  bc76f09738da13e5de510c12ebaaa5cd9c01d0f45ae3ad474dfa2080a2a84ea350d4ddba9733c735cb5a7b8050a56ac699bfc9fd24b3cbe76250e29969fd9605
- SSDEEP
  
  3072:aDf8LoQLj54zctG78V0++hoiBCU6/PkWDn:40LfezctG78G
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

© 2018-2024

Terms | Privacy