Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    326KB

  • Sample

    221229-netrdach59

  • MD5

    aa6417cc143629256d8045cb65aa2340

  • SHA1

    474d58345d874b010002cb48668ada6d2cd0bc6a

  • SHA256

    356ed7fc60d88e7f4aa9ae44e4de969c83e572b529a1a8823d0d172834ce7b80

  • SHA512

    cbae47b640302da0e02febfe790294fbc99973d43430a8586326ebadf80c7a811e0d0e6c3f78559ba0ad72ea0652d4391bba16c9d4041afd3552e11fdbfd285c

  • SSDEEP

    6144:3UjFLlAw4KZsbtQmhmoA1+UyBmYf67k13bwZ4Vxq:EpJApKgNZcBfYy7

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      326KB

    • MD5

      aa6417cc143629256d8045cb65aa2340

    • SHA1

      474d58345d874b010002cb48668ada6d2cd0bc6a

    • SHA256

      356ed7fc60d88e7f4aa9ae44e4de969c83e572b529a1a8823d0d172834ce7b80

    • SHA512

      cbae47b640302da0e02febfe790294fbc99973d43430a8586326ebadf80c7a811e0d0e6c3f78559ba0ad72ea0652d4391bba16c9d4041afd3552e11fdbfd285c

    • SSDEEP

      6144:3UjFLlAw4KZsbtQmhmoA1+UyBmYf67k13bwZ4Vxq:EpJApKgNZcBfYy7

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks