smokeloader | 52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10-2004-x64

Sharing

General

Target

52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5
Size

167KB
Sample

221125-2legxsfb4w
MD5

d658b402cc15188a00db3405dc162b03
SHA1

a7d6d88bc5e9792c004d1191ec028c283c9b29bd
SHA256

52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5
SHA512

d42d396f1028be478caac642b6ed6208b8ccf28af5a989cc2e46f29acd240a3a74829df8ca9cb3d684a14cecb430f289927582c7d43c73b690d2f8bbfd58b074
SSDEEP

3072:T5K1JTIDugFXJS5ZaUTtxwattUQZnJE+bu8:8twRFXITtxwKUQZyq

Score

10^/10

smokeloader backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5.exe

Resource

win10v2004-20221111-en

smokeloader backdoor trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5
- Size
  
  167KB
- MD5
  
  d658b402cc15188a00db3405dc162b03
- SHA1
  
  a7d6d88bc5e9792c004d1191ec028c283c9b29bd
- SHA256
  
  52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5
- SHA512
  
  d42d396f1028be478caac642b6ed6208b8ccf28af5a989cc2e46f29acd240a3a74829df8ca9cb3d684a14cecb430f289927582c7d43c73b690d2f8bbfd58b074
- SSDEEP
  
  3072:T5K1JTIDugFXJS5ZaUTtxwattUQZnJE+bu8:8twRFXITtxwKUQZyq
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

© 2018-2025

Terms | Privacy