Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    222KB

  • Sample

    221228-xqxrvaed4v

  • MD5

    0633ca19cfaaf187479b83ac97befd6c

  • SHA1

    5b413a36f1db1070ec79a39f710fc71624917e1e

  • SHA256

    32dfbcb662a75147060c473f0a841d0ca6fce7d4bc0661467cbd8d47d12df5e5

  • SHA512

    3b80f7148bdf021b1c6c194c24ce1d1d441fd7dc5cb6d3c17347f0b5bcd5a9bcadea1f0ca898f1359faf47abefeee8a15a94f6a4616eea63053b3d44f1d62ed6

  • SSDEEP

    3072:9m9fELCI5jQEE4zIaPZvoaLLvaEBseRgdxyYWUuScwD3tdmdhdH:cELCR4zIaVLH6xyhUuSci3tm

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      222KB

    • MD5

      0633ca19cfaaf187479b83ac97befd6c

    • SHA1

      5b413a36f1db1070ec79a39f710fc71624917e1e

    • SHA256

      32dfbcb662a75147060c473f0a841d0ca6fce7d4bc0661467cbd8d47d12df5e5

    • SHA512

      3b80f7148bdf021b1c6c194c24ce1d1d441fd7dc5cb6d3c17347f0b5bcd5a9bcadea1f0ca898f1359faf47abefeee8a15a94f6a4616eea63053b3d44f1d62ed6

    • SSDEEP

      3072:9m9fELCI5jQEE4zIaPZvoaLLvaEBseRgdxyYWUuScwD3tdmdhdH:cELCR4zIaVLH6xyhUuSci3tm

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks