Overview

overview

10

Static

static

fc4d449e54...f1.exe

windows7-x64

10

fc4d449e54...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc4d449e540c2adc6d3a7cfb175f72ca776cc38461d5c282db12fbe117f40cf1

  • Size

    175KB

  • Sample

    221206-chvx3agd35

  • MD5

    231d5527a9bec2fedee1723b96730b2c

  • SHA1

    c5b9d0bb595f94e9b004792a7cda98fabdf7c8cc

  • SHA256

    06679598118139d944c454a0f3cc051504e8043c5912a5061fe29071f3d2e09b

  • SHA512

    e1dc1925c3688959c68e6f6768eb2d288cd88b8a2edb13b7161906e5edb6b1c6784d108724d520b2e9854f9ec04b4d2fa3522a163b5b3eaf86cb633d72b7c797

  • SSDEEP

    3072:k5DAM5PEyqc0Q8L4jVdvGGCcpaGtracAdKuZsEhZMUHMqeBhzgo91pJuOda5FMYD:k5j5Pn7H8L4jrvGGCI8cAEuZsEhZMcMY

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      fc4d449e540c2adc6d3a7cfb175f72ca776cc38461d5c282db12fbe117f40cf1

    • Size

      273KB

    • MD5

      09e920d56233fd77bed9d60ebce218c9

    • SHA1

      6b55be6b3220c1740ef71825264f165069bda2c0

    • SHA256

      fc4d449e540c2adc6d3a7cfb175f72ca776cc38461d5c282db12fbe117f40cf1

    • SHA512

      58f1877996b893e0831a9a92d2a497c4fe156a9eda2f651282201f72d7c2761bed30cc876db5d55e359e927dd14038eb675e9a415c32f5c42e89017865d48580

    • SSDEEP

      6144:Amp8hFuzquZsEhZMcMqeBhAqIDcF0JVS:AmpUFuzqkhZMcnoSDcF0JVS

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks