Overview

overview

10

Static

static

52cdf8d521...b5.exe

windows7-x64

10

52cdf8d521...b5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5

  • Size

    115KB

  • Sample

    221126-b3abescf72

  • MD5

    435f2b0313d81ef01dd4a073c1f808b5

  • SHA1

    a05c89acf9f84f95f93720075117a12f3a1cb9a8

  • SHA256

    1ae5ba713d530086b229deecc159bd07c4089451f84375c08126e8029b42f721

  • SHA512

    a05b4c1ef51361fd477043f55a2b58cc273a08e00f075441af8aa2bc0400c70c3632bc46493fb579e1e25e38343e129195478652b5ca68151681b7fd4afd1d25

  • SSDEEP

    3072:6feYbEUVTmvBHdJX4LlWb3gyNfUpU7VdsepzTSVQFR7WUDE4zrMkd:1YbEUVToB994xG3vSsdseRTUQvLEuMC

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5

    • Size

      167KB

    • MD5

      d658b402cc15188a00db3405dc162b03

    • SHA1

      a7d6d88bc5e9792c004d1191ec028c283c9b29bd

    • SHA256

      52cdf8d521de7ded50593ca85c0d900f32c31c9e2049d51fbd52f7a69ab689b5

    • SHA512

      d42d396f1028be478caac642b6ed6208b8ccf28af5a989cc2e46f29acd240a3a74829df8ca9cb3d684a14cecb430f289927582c7d43c73b690d2f8bbfd58b074

    • SSDEEP

      3072:T5K1JTIDugFXJS5ZaUTtxwattUQZnJE+bu8:8twRFXITtxwKUQZyq

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks