Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    228KB

  • Sample

    221221-zjqfasgd3x

  • MD5

    41bb80c055b467a24da1a0255d56377b

  • SHA1

    86f87a35e2160e9097408c0ebf957b55ec91c26e

  • SHA256

    96ba3accfd3e0d219ae956812673d9272d7e1fcb7e6c9ee28dd247c1c130d42e

  • SHA512

    e584e00ca58aaa6d2279bda93b9ffcffb214ca29d5480baf5cbdc716cf39a5d1aa7e262a467f4930071592b1372df07deca34b5c197a55aaa7e499fd8c523be0

  • SSDEEP

    3072:ZzsTPR+LqZQUm5rN5Br45gUfCPnSB3rN5d0IlLW4P84nXp9cNQK1+eJV5u43:Cb4LqZQjUfCPSB3Z5KCW85Xp9eRu4

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      228KB

    • MD5

      41bb80c055b467a24da1a0255d56377b

    • SHA1

      86f87a35e2160e9097408c0ebf957b55ec91c26e

    • SHA256

      96ba3accfd3e0d219ae956812673d9272d7e1fcb7e6c9ee28dd247c1c130d42e

    • SHA512

      e584e00ca58aaa6d2279bda93b9ffcffb214ca29d5480baf5cbdc716cf39a5d1aa7e262a467f4930071592b1372df07deca34b5c197a55aaa7e499fd8c523be0

    • SSDEEP

      3072:ZzsTPR+LqZQUm5rN5Br45gUfCPnSB3rN5d0IlLW4P84nXp9cNQK1+eJV5u43:Cb4LqZQjUfCPSB3Z5KCW85Xp9eRu4

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks