Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    214KB

  • Sample

    221218-cmt7bsad45

  • MD5

    71f247edec43d136e1da63680d15ef72

  • SHA1

    1d98f0fa8e73c568bba0c87df8a3cb15470bd314

  • SHA256

    3de49965f03abed5885f1f5ccd017de001b3b022a8d33dc77ef58853491643bd

  • SHA512

    b565588f178e41997e75880656520e36cdce3674bac1e693db2b6b5136cafe56f829762a0b744140848872f76c7153d9b4de0eec3752195acc924a55913e287a

  • SSDEEP

    3072:3u8mcsFLPYpZwRQakk4f4ubiWeujNNU8/g3xo3vG3ERWR3LV:e8mZFLPYpzzb4u2WeunBg3COU0VB

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      214KB

    • MD5

      71f247edec43d136e1da63680d15ef72

    • SHA1

      1d98f0fa8e73c568bba0c87df8a3cb15470bd314

    • SHA256

      3de49965f03abed5885f1f5ccd017de001b3b022a8d33dc77ef58853491643bd

    • SHA512

      b565588f178e41997e75880656520e36cdce3674bac1e693db2b6b5136cafe56f829762a0b744140848872f76c7153d9b4de0eec3752195acc924a55913e287a

    • SSDEEP

      3072:3u8mcsFLPYpZwRQakk4f4ubiWeujNNU8/g3xo3vG3ERWR3LV:e8mZFLPYpzzb4u2WeunBg3COU0VB

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks