Overview

overview

10

Static

static

3fbc52c1c2...55.exe

windows7-x64

10

3fbc52c1c2...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fbc52c1c2e4366ce51ea5298ae257c25f08c66576de7d57c3901ccee9fd0d55

  • Size

    230KB

  • Sample

    230104-zdtwjada7z

  • MD5

    f707e3b58126f494059bbf21093c86a3

  • SHA1

    fad342f969c10ff6065cdc23293b3984c277796a

  • SHA256

    d082b19147a5b3732f99e811ee1ae3bb244be2a243381ac13a41229cb20799b8

  • SHA512

    6934d49b9b990d858a26aa7fc3e8f4cdd130d2eb4504b018057307e913f812889b1554d426346f210f4543bd8bb7a1b34fc9703b59f040b424aecd50b335f739

  • SSDEEP

    6144:H+P7W+CAbiOGUW7g7s7BwL6Cmy5Gm03js0y990:H+TvBsg7w6+hy2K70

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      3fbc52c1c2e4366ce51ea5298ae257c25f08c66576de7d57c3901ccee9fd0d55

    • Size

      367KB

    • MD5

      6486f9309c49a51ba8c8477a1fe0a152

    • SHA1

      801508996715b9f3e100174da96332a08c4ae955

    • SHA256

      3fbc52c1c2e4366ce51ea5298ae257c25f08c66576de7d57c3901ccee9fd0d55

    • SHA512

      c426c2444e2ea179317e301c083caa6354d05e49c8e8830691927ba6cc717720a02a348d67fbfb5b2fd3c0a37a2560b00e7835d459a046f8eec84beb77406e10

    • SSDEEP

      6144:vJHLqKPeokhFcA34k7g7s7x5cC7dBooxupmLltTgjT:vJe4eoAp34yg7w4C7dBooxupmL

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks