smokeloader | 50c1a915fd5ba5259c9515027073d1a332415fdf722eb81a7452f2ec01f2b195 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10-2004-x64

Sharing

General

Target

50c1a915fd5ba5259c9515027073d1a332415fdf722eb81a7452f2ec01f2b195
Size

264KB
Sample

221004-h15swahbcl
MD5

21f603a63d5763818670a9cdaa2b236c
SHA1

c439da5ba0d6c5ab44fa586f5b1270f0ba29067d
SHA256

50c1a915fd5ba5259c9515027073d1a332415fdf722eb81a7452f2ec01f2b195
SHA512

a76deb675463a0f19bcf1aa5c30decd371c2aa9bfc1d15ef3acb6a273884351c14424fd127f586d7f43f7108418da261979c7b4cbcd85109d73f779207274862
SSDEEP

6144:6uZL8h2AM9NF3ookGeh5uzbgwucOi60BxwVf:62oh2AYFTe/unndO6

Score

10^/10

smokeloader backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

50c1a915fd5ba5259c9515027073d1a332415fdf722eb81a7452f2ec01f2b195.exe

Resource

win10v2004-20220812-en

smokeloader backdoor trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  50c1a915fd5ba5259c9515027073d1a332415fdf722eb81a7452f2ec01f2b195
- Size
  
  264KB
- MD5
  
  21f603a63d5763818670a9cdaa2b236c
- SHA1
  
  c439da5ba0d6c5ab44fa586f5b1270f0ba29067d
- SHA256
  
  50c1a915fd5ba5259c9515027073d1a332415fdf722eb81a7452f2ec01f2b195
- SHA512
  
  a76deb675463a0f19bcf1aa5c30decd371c2aa9bfc1d15ef3acb6a273884351c14424fd127f586d7f43f7108418da261979c7b4cbcd85109d73f779207274862
- SSDEEP
  
  6144:6uZL8h2AM9NF3ookGeh5uzbgwucOi60BxwVf:62oh2AYFTe/unndO6
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

© 2018-2024

Terms | Privacy