Overview

overview

10

Static

static

c921e35726...5f.exe

windows7-x64

10

c921e35726...5f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c921e35726bdc79b0281b002dcebf2296ccc404f5dc1d9db55f6dc89e97ba95f

  • Size

    176KB

  • Sample

    221207-cnnqyafb58

  • MD5

    80664746b5c69fcbaa90cec8cee5ef37

  • SHA1

    3ca11fbd70f34c70c5f08b04846fa819007136d3

  • SHA256

    0aeeda33c05f37b2e79b6869ddfe43c5e06d4ba341bc145e8006701c513762f3

  • SHA512

    422aef1fe0fe2a2176a6de2bc430a03a82d38fe4684e151adf26550cedd22a226f0c34b47861e80909341dc0a398051517a85cd0b6c3589f99a16b5477c68758

  • SSDEEP

    3072:Fn6HasaHjYliXEdk/m3TiH+m/nKbXGfU/tmhT2HFedyGUM3kV5NNHS2zSW5BW:CQH5Udk/Eq+anKbWs/chwedBdU3NlQW+

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      c921e35726bdc79b0281b002dcebf2296ccc404f5dc1d9db55f6dc89e97ba95f

    • Size

      274KB

    • MD5

      cd5713f487669c10d8baff8cbb950ee6

    • SHA1

      01f3e4c7dfe031426360cd39c364c3992473cdf1

    • SHA256

      c921e35726bdc79b0281b002dcebf2296ccc404f5dc1d9db55f6dc89e97ba95f

    • SHA512

      dd30e1f6d345a051ca5d040f35fd2a7999e3fbc11872058fe3013d9d243e35260f5596255247763939770e8f014c16f94c83639ec47be40940a5b641f29ae465

    • SSDEEP

      6144:Cheyf7X/UPyH+anKbWs/WmSIDc5gcvVVS:CUyjXMW2WgZDc5gcvVVS

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks