Overview

overview

10

Static

static

e1d1a26711...d6.exe

windows7-x64

10

e1d1a26711...d6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e1d1a26711616a85bf2865a3e0571d11b611303d825f99fa5b1231bfe1ff91d6

  • Size

    161KB

  • Sample

    230114-wyarlsfe2x

  • MD5

    7e3dfe42d8343667d9b455714da97563

  • SHA1

    7680114faf6cc9d3f9a3c1b544345e90281f9981

  • SHA256

    a252813eaa654c21afd6f2a48fd0d8e13a0cb30bf348acc0016e7939044eda48

  • SHA512

    ff11c87725143b001f0f57cd013b96c2b8b3e3124531927649f24f584caebc5d8e1dc9dc740e31ad4de8766a6c16227562413a18f3984e08a91d4d3c3d7c2357

  • SSDEEP

    3072:X/aw3v/AeH/nqWTehwc4iZ6KBCb5wn2TWv27cUONq5kQHjfMEBsJsRqEcdmxdZj2:Xf3v4+TuNZ+5hKvOdONpJ69FxO

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      e1d1a26711616a85bf2865a3e0571d11b611303d825f99fa5b1231bfe1ff91d6

    • Size

      260KB

    • MD5

      41e6103460d1d000e05000a35917da95

    • SHA1

      2f5a3b7eac251a0f9b19a538d902c48a2bf90854

    • SHA256

      e1d1a26711616a85bf2865a3e0571d11b611303d825f99fa5b1231bfe1ff91d6

    • SHA512

      f4992c1c475b9a18b7ab64c72d8c2f8815d99bee1da1adc2102b5b1d77d369575252c60b02b46a1097b99e15586d8137038fee9bf6506d96b0b232178ba31afa

    • SSDEEP

      3072:SXGuWhUL5b3+NGQbOK2TWv27cUONq5kyxH2apb8pBI8jwWRjoV:SdQvbOlKvOdON+pgpRjFE

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks