smokeloader | 408ce51adb6de96ab38e768b537a696436bc5fe8818b004e25a4f5a806a20207 | Triage

Submit
Reports

Overview

overview

Static

static

408ce51adb...07.exe

windows7-x64

408ce51adb...07.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

408ce51adb6de96ab38e768b537a696436bc5fe8818b004e25a4f5a806a20207.exe
Size

304KB
Sample

221222-cc5v3sdg27
MD5

8844d7bf8fb7a585c4f4ff6bdf4bb26b
SHA1

e0e2f7a311056677423567cc69973e5fc6e6257b
SHA256

408ce51adb6de96ab38e768b537a696436bc5fe8818b004e25a4f5a806a20207
SHA512

ffe162fe12b63f9b675a537db3de5e90a624998b9b3fa79c072106ab78f2dc180cb550a2e9836eb625264cec33b4646f63661d78e8275c7257145eb45e2f852b
SSDEEP

6144:xLAjWqAFFaSsBKsKFL4ctGsq2tz+3ng+E49HwchLP3i:xUaqAFyBjUL4JiVwnVZH9P3

Score

10^/10

smokeloader backdoor trojan

Static task

static1

Behavioral task

behavioral1

Sample

408ce51adb6de96ab38e768b537a696436bc5fe8818b004e25a4f5a806a20207.exe

Resource

win7-20220812-en

smokeloader backdoor trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

408ce51adb6de96ab38e768b537a696436bc5fe8818b004e25a4f5a806a20207.exe

Resource

win10v2004-20220812-en

smokeloader backdoor trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  408ce51adb6de96ab38e768b537a696436bc5fe8818b004e25a4f5a806a20207.exe
- Size
  
  304KB
- MD5
  
  8844d7bf8fb7a585c4f4ff6bdf4bb26b
- SHA1
  
  e0e2f7a311056677423567cc69973e5fc6e6257b
- SHA256
  
  408ce51adb6de96ab38e768b537a696436bc5fe8818b004e25a4f5a806a20207
- SHA512
  
  ffe162fe12b63f9b675a537db3de5e90a624998b9b3fa79c072106ab78f2dc180cb550a2e9836eb625264cec33b4646f63661d78e8275c7257145eb45e2f852b
- SSDEEP
  
  6144:xLAjWqAFFaSsBKsKFL4ctGsq2tz+3ng+E49HwchLP3i:xUaqAFyBjUL4JiVwnVZH9P3
Score

10^/10

smokeloader backdoor trojan
- Detects Smokeloader packer
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoortrojan

© 2018-2025

Terms | Privacy