Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    227KB

  • Sample

    221216-kcemwshb9s

  • MD5

    612783eceed3edd151d79be4f373868c

  • SHA1

    eb53ccf8f4911ea6d979e55b80b59d7ef840c043

  • SHA256

    7cfd91624a0420a8799a4ebfdbb9eca5ad7e15a993ad08c59708dd87d1cf1510

  • SHA512

    a67f2d1ef422197f15c5e794dce787a1c18f39aebe39adceefb0a7a708b9016dd79fc8d35599a0c87e99eced6c1220791e584c956a4f1a5f0a51d01c51f34632

  • SSDEEP

    3072:HaqkCQtgLjmEThlcRs/jn9H/0IiCZr3FYSWmNUPZEGLQ2mppGT8J1qHtWqMPDcf2:6qkALjmEFFHc9CB1H+2Btx1g8qMrc

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      227KB

    • MD5

      612783eceed3edd151d79be4f373868c

    • SHA1

      eb53ccf8f4911ea6d979e55b80b59d7ef840c043

    • SHA256

      7cfd91624a0420a8799a4ebfdbb9eca5ad7e15a993ad08c59708dd87d1cf1510

    • SHA512

      a67f2d1ef422197f15c5e794dce787a1c18f39aebe39adceefb0a7a708b9016dd79fc8d35599a0c87e99eced6c1220791e584c956a4f1a5f0a51d01c51f34632

    • SSDEEP

      3072:HaqkCQtgLjmEThlcRs/jn9H/0IiCZr3FYSWmNUPZEGLQ2mppGT8J1qHtWqMPDcf2:6qkALjmEFFHc9CB1H+2Btx1g8qMrc

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks