Overview

overview

10

Static

static

5a208f18c5...bd.exe

windows7-x64

10

5a208f18c5...bd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a208f18c51f949e71f6b477d4718579b09e34218691fe904a305efbcfe800bd

  • Size

    142KB

  • Sample

    221026-1jppfahbg7

  • MD5

    f7e04b4f70796483c3d41e84379b5ee6

  • SHA1

    b8ffc17af3dc8cbed7ecd312653c16a5ea9e36b4

  • SHA256

    86a7fd574f520a1e64159cd7645a56a4e19c00ac26fe6a4dc619c11398162d18

  • SHA512

    9a46b74b08b943aa22c3e378d7941545c791f1a80005b8c1622aecfbf4b813cc40357aaa6af1b80f1bbec4d59709ece692032112171acdf36bb23dc081d941ab

  • SSDEEP

    3072:UaG/epSHpUV9GaZwMLFceqWtCsQDKs7Q3fVnoJIre:7js1aWM3XCh3inYh

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      5a208f18c51f949e71f6b477d4718579b09e34218691fe904a305efbcfe800bd

    • Size

      217KB

    • MD5

      ac7c9f3b7dfb8d2046f55a49d920164f

    • SHA1

      5c278d1e73bf037d601b87a2a71ecba73a4753d6

    • SHA256

      5a208f18c51f949e71f6b477d4718579b09e34218691fe904a305efbcfe800bd

    • SHA512

      16a007bbf5531789baa5e24bbe4239a3e64c5b1be8e94fdbe129a9c826d6c54b826648445b8800303cff55188ceb8a760b411ce6bd704aabc89c603367964c6a

    • SSDEEP

      3072:XcCMQlRcaxBzNgx0LklC6JJvE56Zaa7O5P1R6XMmdBq/lyJ4bx:XcGXbzRLklCiJvl3YPzYMQBqDb

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks