Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    351KB

  • Sample

    221203-z6ra4sfb33

  • MD5

    b5d04a53ec15358a3f01ef8dc9b16030

  • SHA1

    6325063eeaa97ca9b92e0b3888776a31552d5525

  • SHA256

    efbeab3ac161089d0460f064290c5f250bb32901fd6612072c81b74168753516

  • SHA512

    f163f84ba9278dd67714d0d117a7a588ee8fc156b1583c945c4211756238b3e131dcd0daa92c9db18f5a0f3c2b8587b5ae618838c8389e24c6d7ae3f528f7123

  • SSDEEP

    6144:L0SpLYcVNlyUVVyT1n/yynMW2RqneeaY8:LvN7JPq5yUMW3TaY

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      351KB

    • MD5

      b5d04a53ec15358a3f01ef8dc9b16030

    • SHA1

      6325063eeaa97ca9b92e0b3888776a31552d5525

    • SHA256

      efbeab3ac161089d0460f064290c5f250bb32901fd6612072c81b74168753516

    • SHA512

      f163f84ba9278dd67714d0d117a7a588ee8fc156b1583c945c4211756238b3e131dcd0daa92c9db18f5a0f3c2b8587b5ae618838c8389e24c6d7ae3f528f7123

    • SSDEEP

      6144:L0SpLYcVNlyUVVyT1n/yynMW2RqneeaY8:LvN7JPq5yUMW3TaY

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks