Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    295KB

  • Sample

    230131-jpac9sfe58

  • MD5

    4a3092d13c54b0b8de901c3d4e461bba

  • SHA1

    126c60abea1ec11c8e83cad3847d562be6e6269d

  • SHA256

    9c770de7138aafd9fd7d9639932171fc06a386c483667c949171da0fc307c562

  • SHA512

    18bbabea0c3ec2710c5807c0aebd0f79cb28ab4f7da98649777f9bc3d19c16b481412e2054e10801a6b6b39c6eca1e7bf0a941856326714ad2a481b6dcab4282

  • SSDEEP

    3072:6UXBumygggxLoI7R4J2bKW/y80RLQ8T7LRp5AIC7f43H7BF7RCDF1:dIRoxLoVJ21y80RBBpK7f4VT

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file

    • Size

      295KB

    • MD5

      4a3092d13c54b0b8de901c3d4e461bba

    • SHA1

      126c60abea1ec11c8e83cad3847d562be6e6269d

    • SHA256

      9c770de7138aafd9fd7d9639932171fc06a386c483667c949171da0fc307c562

    • SHA512

      18bbabea0c3ec2710c5807c0aebd0f79cb28ab4f7da98649777f9bc3d19c16b481412e2054e10801a6b6b39c6eca1e7bf0a941856326714ad2a481b6dcab4282

    • SSDEEP

      3072:6UXBumygggxLoI7R4J2bKW/y80RLQ8T7LRp5AIC7f43H7BF7RCDF1:dIRoxLoVJ21y80RBBpK7f4VT

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks