Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    283KB

  • Sample

    230205-z3llfsec5z

  • MD5

    0d692ae547062a730f37fe22d79423ce

  • SHA1

    6f948830bba9f675e11292c667c69c50651db245

  • SHA256

    346e189f1e8ae150e3376a4361eedcaffafe60f1de4939d879b09a379a196ad6

  • SHA512

    ff8aeb9b39be3a71316795b1b6e82fac34ba0ed90f1a1bb85e8a88fa3e9ae9de973a21c2267d2518c0d07689b14c9bbce6dfccc58b0a59e0f8200821b7fb32db

  • SSDEEP

    3072:laXXOnPLPX0AyLpE+fLwLWDu95d1flN2dsR2fFiIMKMQ0X8cSWfBaJDN:4XXc7XaLpE+TUPv2uRLIFhe3BaJR

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file

    • Size

      283KB

    • MD5

      0d692ae547062a730f37fe22d79423ce

    • SHA1

      6f948830bba9f675e11292c667c69c50651db245

    • SHA256

      346e189f1e8ae150e3376a4361eedcaffafe60f1de4939d879b09a379a196ad6

    • SHA512

      ff8aeb9b39be3a71316795b1b6e82fac34ba0ed90f1a1bb85e8a88fa3e9ae9de973a21c2267d2518c0d07689b14c9bbce6dfccc58b0a59e0f8200821b7fb32db

    • SSDEEP

      3072:laXXOnPLPX0AyLpE+fLwLWDu95d1flN2dsR2fFiIMKMQ0X8cSWfBaJDN:4XXc7XaLpE+TUPv2uRLIFhe3BaJR

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks