Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    351KB

  • Sample

    221203-wbqjjsfa3w

  • MD5

    f5c288d46b24ede2f47a7e03f28be4f2

  • SHA1

    d76c725769759efdd3c65d681ee77852a33cd0f9

  • SHA256

    9786cace7f090e33f0cecfcf58449954ffca97a9279d7ce3e0d86eb536539233

  • SHA512

    3222d1e4f378fd6a87f57182711584673b2f50ea2de81361515ce4fde0b7cee6b73ecd3569f372f981a67f511b081073de8cbdbf5e4cff9c24bb0d800de56304

  • SSDEEP

    3072:0wFjrD5nfI5Aeigazv9ukTWf/Ca2seEE0WkGnWNTC6NRMHnlXptFhQ3HYDrEmU:5rtnf5/Z9ub/Zd3E0InMW2RqnCXY

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      351KB

    • MD5

      f5c288d46b24ede2f47a7e03f28be4f2

    • SHA1

      d76c725769759efdd3c65d681ee77852a33cd0f9

    • SHA256

      9786cace7f090e33f0cecfcf58449954ffca97a9279d7ce3e0d86eb536539233

    • SHA512

      3222d1e4f378fd6a87f57182711584673b2f50ea2de81361515ce4fde0b7cee6b73ecd3569f372f981a67f511b081073de8cbdbf5e4cff9c24bb0d800de56304

    • SSDEEP

      3072:0wFjrD5nfI5Aeigazv9ukTWf/Ca2seEE0WkGnWNTC6NRMHnlXptFhQ3HYDrEmU:5rtnf5/Z9ub/Zd3E0InMW2RqnCXY

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks