Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    214KB

  • Sample

    221216-zze99sff73

  • MD5

    6e8036173acfac66de0833cf127a6b6a

  • SHA1

    cd5194abce1de207051104170038c1df8ad2b137

  • SHA256

    1851a40d7e7dd5477531abc09ee602521b4b5439521ebd57240820629024c85f

  • SHA512

    b7d5fd42226d81a0f335175b6cdf7ffb4e48c305201b99a34bb343ebaed2b6c9c6a3574be66fe95e7957e84e4f4d9086d4bf14113c78e21a6ff8668293558bb6

  • SSDEEP

    3072:f/Qr3pL/xrSbRVZJQML+gm1EDVdP3zAmLC1izvx4tUwELszoXgb940zwUzQRKF+:H8pL/xgST1EDTlxhgzoXgp40M2b

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      214KB

    • MD5

      6e8036173acfac66de0833cf127a6b6a

    • SHA1

      cd5194abce1de207051104170038c1df8ad2b137

    • SHA256

      1851a40d7e7dd5477531abc09ee602521b4b5439521ebd57240820629024c85f

    • SHA512

      b7d5fd42226d81a0f335175b6cdf7ffb4e48c305201b99a34bb343ebaed2b6c9c6a3574be66fe95e7957e84e4f4d9086d4bf14113c78e21a6ff8668293558bb6

    • SSDEEP

      3072:f/Qr3pL/xrSbRVZJQML+gm1EDVdP3zAmLC1izvx4tUwELszoXgb940zwUzQRKF+:H8pL/xgST1EDTlxhgzoXgp40M2b

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks