Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    229KB

  • Sample

    221221-nsk2dscb99

  • MD5

    6a634b47a8431f71105bc150cd2e6241

  • SHA1

    09a325f3e9ecea2ee458d6155f051ae08f7becd3

  • SHA256

    06c06e23edf472a8074fa5ecd81b1558e2b16758f5133eeb8b8dd5ce8909615d

  • SHA512

    98262a99ae2dc96df8ad24a9ec573153b6d3929465ecfac938df0c187cd569c77e88b5b0fa2e688fcdbff4230d8ff3d5e0240fcddfb9ae6dcbb9f4f0627cfd74

  • SSDEEP

    3072:GoZY3ALdy0Pm51act+jHXjBRG2+G+LW4P84nnlAnuW1jRUcNQK1+eJV5u48:GhwLd/i+bTBRmW85nWHeeRu4

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file

    • Size

      229KB

    • MD5

      6a634b47a8431f71105bc150cd2e6241

    • SHA1

      09a325f3e9ecea2ee458d6155f051ae08f7becd3

    • SHA256

      06c06e23edf472a8074fa5ecd81b1558e2b16758f5133eeb8b8dd5ce8909615d

    • SHA512

      98262a99ae2dc96df8ad24a9ec573153b6d3929465ecfac938df0c187cd569c77e88b5b0fa2e688fcdbff4230d8ff3d5e0240fcddfb9ae6dcbb9f4f0627cfd74

    • SSDEEP

      3072:GoZY3ALdy0Pm51act+jHXjBRG2+G+LW4P84nnlAnuW1jRUcNQK1+eJV5u48:GhwLd/i+bTBRmW85nWHeeRu4

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks