Overview

overview

10

Static

static

b5dfeea815...cf.exe

windows7-x64

10

b5dfeea815...cf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5dfeea815d0c2725ddec26e49d3e82b444b5ddbf38fb27dc441039fb28d9dcf.exe

  • Size

    174KB

  • Sample

    221028-kzbjrafbc8

  • MD5

    10e1c34f4c6ce2205bd4fe5fa71f62a4

  • SHA1

    8ce7c7a480a0c30b49d1efc8622d567d9cffed2f

  • SHA256

    b5dfeea815d0c2725ddec26e49d3e82b444b5ddbf38fb27dc441039fb28d9dcf

  • SHA512

    c5fee9013553b02edde6f90a822602bc0fbb2fd98de3dd05c79e3df1d60fd0d5296648bccdba1f21c30147648e51327d5a26e29dcf7f6e4ca3235c3ab8a0e45d

  • SSDEEP

    3072:jm9pj51LK4yKkB3q0CR3SRhgj33s8dJ8B4G/I/Pk9In:ctOaOrCR8hgjHs81G

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      b5dfeea815d0c2725ddec26e49d3e82b444b5ddbf38fb27dc441039fb28d9dcf.exe

    • Size

      174KB

    • MD5

      10e1c34f4c6ce2205bd4fe5fa71f62a4

    • SHA1

      8ce7c7a480a0c30b49d1efc8622d567d9cffed2f

    • SHA256

      b5dfeea815d0c2725ddec26e49d3e82b444b5ddbf38fb27dc441039fb28d9dcf

    • SHA512

      c5fee9013553b02edde6f90a822602bc0fbb2fd98de3dd05c79e3df1d60fd0d5296648bccdba1f21c30147648e51327d5a26e29dcf7f6e4ca3235c3ab8a0e45d

    • SSDEEP

      3072:jm9pj51LK4yKkB3q0CR3SRhgj33s8dJ8B4G/I/Pk9In:ctOaOrCR8hgjHs81G

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks