smokeloader | e5ccd1122c5a29798ae8aeb164d988d3f06eae78468cfbde1c712ab59e430f5c | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10-1703-x64

Sharing

General

Target

e5ccd1122c5a29798ae8aeb164d988d3f06eae78468cfbde1c712ab59e430f5c
Size

274KB
Sample

221010-2hlf3adfhl
MD5

e07c33e3d5bc72318e85e3bf0a098318
SHA1

f3e759f0d3efa6debafeedbc4a99ce12cda78197
SHA256

e5ccd1122c5a29798ae8aeb164d988d3f06eae78468cfbde1c712ab59e430f5c
SHA512

9072daa3e3841bc65f1c9983d581a27207aaad7e25c3a3171fd842815f07da79e7cf42102e6e8825fc5f02442393e8c082b14ecbe2ce9668248b7900bafb7b5a
SSDEEP

6144:JNRXUGPEIoj+xX/HD+13KkmBjrwVfquS:JNsIojuDGmBjd

Score

10^/10

smokeloader backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

e5ccd1122c5a29798ae8aeb164d988d3f06eae78468cfbde1c712ab59e430f5c.exe

Resource

win10-20220812-en

smokeloader backdoor trojan

windows10-1703-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  e5ccd1122c5a29798ae8aeb164d988d3f06eae78468cfbde1c712ab59e430f5c
- Size
  
  274KB
- MD5
  
  e07c33e3d5bc72318e85e3bf0a098318
- SHA1
  
  f3e759f0d3efa6debafeedbc4a99ce12cda78197
- SHA256
  
  e5ccd1122c5a29798ae8aeb164d988d3f06eae78468cfbde1c712ab59e430f5c
- SHA512
  
  9072daa3e3841bc65f1c9983d581a27207aaad7e25c3a3171fd842815f07da79e7cf42102e6e8825fc5f02442393e8c082b14ecbe2ce9668248b7900bafb7b5a
- SSDEEP
  
  6144:JNRXUGPEIoj+xX/HD+13KkmBjrwVfquS:JNsIojuDGmBjd
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

© 2018-2024

Terms | Privacy