smokeloader | e003f38c5e89e07fff5f1e3b9372d206eba2fce1f3092e8461d030dd6d5c057f | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10-1703-x64

Sharing

General

Target

e003f38c5e89e07fff5f1e3b9372d206eba2fce1f3092e8461d030dd6d5c057f
Size

153KB
Sample

220926-n4apssafg4
MD5

aee9789bdbe1bfb6e7dbde48e978e20a
SHA1

8b3367b635122e15f7251fd2da0eaaedc011404c
SHA256

e003f38c5e89e07fff5f1e3b9372d206eba2fce1f3092e8461d030dd6d5c057f
SHA512

118d7e2fc7a9566b373b2fb4f0abaebab6227fec0ec106965a92c965ebe8ae448d1e51a23fb15db048fa2e52a935ccf480ecfcde78d8cf517e8a3d9b3812bc84
SSDEEP

3072:tVFmz5WediqWroLRgrZRNr0VBiVBnDe4ki5B:tvqE4RAe064k

Score

10^/10

smokeloader backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

e003f38c5e89e07fff5f1e3b9372d206eba2fce1f3092e8461d030dd6d5c057f.exe

Resource

win10-20220812-en

smokeloader backdoor trojan

windows10-1703-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  e003f38c5e89e07fff5f1e3b9372d206eba2fce1f3092e8461d030dd6d5c057f
- Size
  
  153KB
- MD5
  
  aee9789bdbe1bfb6e7dbde48e978e20a
- SHA1
  
  8b3367b635122e15f7251fd2da0eaaedc011404c
- SHA256
  
  e003f38c5e89e07fff5f1e3b9372d206eba2fce1f3092e8461d030dd6d5c057f
- SHA512
  
  118d7e2fc7a9566b373b2fb4f0abaebab6227fec0ec106965a92c965ebe8ae448d1e51a23fb15db048fa2e52a935ccf480ecfcde78d8cf517e8a3d9b3812bc84
- SSDEEP
  
  3072:tVFmz5WediqWroLRgrZRNr0VBiVBnDe4ki5B:tvqE4RAe064k
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

© 2018-2024

Terms | Privacy