Overview

overview

10

Static

static

dbb5a1f87b...6e.exe

windows7-x64

10

dbb5a1f87b...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbb5a1f87b3db55e2228f08b6d2f482db0452af05fe11d579cd4dc92c105086e

  • Size

    115KB

  • Sample

    221127-yhsnladf92

  • MD5

    7da92e04a43647a43884635574729fe9

  • SHA1

    f615151775b78f0d7aaea82bd1598441fe9ff34f

  • SHA256

    7adfef1e26f3fffe1dfd1c9cacf56af9c86dfd0d8a5d22883644ff6018e0595f

  • SHA512

    ee53154322b11afa9dcf1308afc8b8a2cb8919af301fcb4c9ee96b262e67bf4fe260f08399352aa3544c04f999eabb3ab190965d3b01dc295522bc138ff22b87

  • SSDEEP

    3072:JC68Awn/6PeBwYgDlvh8f3n+ddFliP8gwipv2OLg:Jgni+wYKafUfy85OxLg

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      dbb5a1f87b3db55e2228f08b6d2f482db0452af05fe11d579cd4dc92c105086e

    • Size

      168KB

    • MD5

      21dc7d54b5ccd1be83218d572b202010

    • SHA1

      7a814c0bc1a767c18245121f6afb998da48b0b74

    • SHA256

      dbb5a1f87b3db55e2228f08b6d2f482db0452af05fe11d579cd4dc92c105086e

    • SHA512

      3a34bd23ff052fc285fc6baf81544eea74d36e0af27c85c9cc4afd05f42170cd6592786a2489406ab709a91cc654775cfcb1cb2e96cb2ee29124b5efe8b23baf

    • SSDEEP

      3072:O4V1Ra/FLNhS55tYYKnK3QY3fwM6raEAyD:RodLNItYYmpZ2y

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks