Overview

overview

10

Static

static

191b633176...d4.exe

windows7-x64

10

191b633176...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    191b6331769ef2a215acb9860162bad7c0f5bc9d8ca188ec98cb9cdb8f7279d4

  • Size

    105KB

  • Sample

    221127-d3x4lafe65

  • MD5

    84a8d4e5262a04372a04bdf0f66fa68d

  • SHA1

    99382e864b76950eccfbda942eb7abfa7a42297c

  • SHA256

    eae288547ab87a4a268f039689ceadb1a84fd273222a2c053e591fd5f24897d5

  • SHA512

    4cd7f18f7d619e907b3099633e6244d6a01ec6c2572973bf6448def4c7bc06b94fde92d914c62de2b90de99d52e1f07867512f746542d34f8f0833f8fb491b80

  • SSDEEP

    3072:fTa5Jk1d13XfGVap4nPPepFgCxC2e6wMUjOk:6m1r3APmgj2y

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      191b6331769ef2a215acb9860162bad7c0f5bc9d8ca188ec98cb9cdb8f7279d4

    • Size

      148KB

    • MD5

      7df627cb356b5c3adf0b82e88658c24c

    • SHA1

      8158102873715540859d87c12dae6b7932c8748c

    • SHA256

      191b6331769ef2a215acb9860162bad7c0f5bc9d8ca188ec98cb9cdb8f7279d4

    • SHA512

      918cbed74805dd0a55ca237ef3afddbc29e5d4f62451b0b74992b4d1a5013aa299bded3b8d253534e6dc8376b08a40b60e36c22ec663149cbb31f30848e8982f

    • SSDEEP

      3072:C5gTe2tnylAn5N1ekIvqo23KjwYWPmEDfg8:nTeknSgIvVLwY5E

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks