Overview

overview

10

Static

static

60963ff082...80.exe

windows7-x64

10

60963ff082...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    60963ff08218132f7f570a0a82a8b543b8c659736702139248652e6cbd1cf780

  • Size

    142KB

  • Sample

    221219-fzav1ahc6y

  • MD5

    2955ecf9a9b8b7cceb212fbdfc99ecdb

  • SHA1

    2bb03bce6b5d9fef946d29b241ce4556fccaf793

  • SHA256

    9a3f94b461fad473a4430743e99f1d7ba115f260343863f41154cee62f1e5380

  • SHA512

    e51f53e557d2bc13de1c680b06b9ab8111ad6862b427ff4614d2e80b0b086184510efd846efba00873a492940e15bfe56c7a445555476e591a16390674fa2220

  • SSDEEP

    3072:mFTp3vZP2VBjR4Z+jGAjgUF5ub3jmfGec+H3NU8lw3a24dsd:ARxgjR4Zeb5xc+H3W8m3d4Gd

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      60963ff08218132f7f570a0a82a8b543b8c659736702139248652e6cbd1cf780

    • Size

      214KB

    • MD5

      5241b5f99e62909635f32e8172591922

    • SHA1

      dbf774a2d1558a368112a7ce2de267060ae2bb92

    • SHA256

      60963ff08218132f7f570a0a82a8b543b8c659736702139248652e6cbd1cf780

    • SHA512

      5bf8deed9200a3bef62734099d41ae42ef87a5b6d7b8c4bd2bcf84a1eb9ed7ad0c5287fc37fab2ec657ab68fede659f91cd3462a47c8ef9c4732e0f6f4b7373e

    • SSDEEP

      3072:ybqSRqaL1Q7RH2luHi6y2cY8XWY/mem+MjPpg3uO7kXHOEHOil3lk025PH:QqWpLyQEVSWummMDK+OYuEjlVklPH

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks