Overview

overview

10

Static

static

ba284bb554...4c.exe

windows7-x64

10

ba284bb554...4c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba284bb55453961eb1a49fedebce1fe6259abefb73ccf51c210b528d3de0234c

  • Size

    138KB

  • Sample

    221227-3t4x8abh9x

  • MD5

    54839e74a9a907211810bdd10033a092

  • SHA1

    db3531afef4bd886c7ae1f76a53f33aae4184bc0

  • SHA256

    279e52fc025f255e99a9d64cc72a79ce601d0302e46b574e29e22f77753a734e

  • SHA512

    a5c2aba8ec29ae02e305670155a74b70b28ae26e2d1556fdbaf23a5750f77246a41ee908d33ce10b9d43b800089ffda92bb8ee269e0fe6d1c499cc21554f069b

  • SSDEEP

    3072:KP0BCDkaTttf05RDeqSz3iGmwAO9N5kbinqgi8cSVSbF:Bmkwttf0SrLm7AmiqP81A5

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      ba284bb55453961eb1a49fedebce1fe6259abefb73ccf51c210b528d3de0234c

    • Size

      229KB

    • MD5

      bfb23816abc335bd5298d567c82a2f14

    • SHA1

      d55c84109c268af84a10e88875ec98c0338dc951

    • SHA256

      ba284bb55453961eb1a49fedebce1fe6259abefb73ccf51c210b528d3de0234c

    • SHA512

      d8a0a58a468ac7e292d2885387b14ea0486f12ca0467690e717e4402e50e21f284c3c4667847fe0af90c26b3897177ebddc1bd8d97cb70f0b4dfafbbef2ccb69

    • SSDEEP

      3072:191GnL52fsvihBj5GCTXlSLjhxogX/DunNx6fKtKgjLptTmllUFw6pI+V+Y700:InL52fsv6yCBS0gix6sHsl1+I+Vl7l

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks