Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    195KB

  • Sample

    230208-e5cq4sgf41

  • MD5

    971f53b08fd5442b2766ea76353b7757

  • SHA1

    5a1b99788ff7399c6b4e6ee62d7b119f071a4be9

  • SHA256

    7b7ef0a827b7bf71fa595e2784c11a8ed774af05a56c7335716a326b33b1a6c8

  • SHA512

    850b063a5da6bace934332a828441fa0f69949b53a98a93e5eef9fd44c8fd4a4184d4c2790623e5937105cb2376c1a32438c6a8e46fece589e83258ac13d7f16

  • SSDEEP

    3072:vzwOIi10prcBLGImjWOa5i2IHDoweTT7BzwzCYBuxW1yj6WC/Y8b:vzwkwQLRmJrjoweTTNQ3uxW1t/d

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      195KB

    • MD5

      971f53b08fd5442b2766ea76353b7757

    • SHA1

      5a1b99788ff7399c6b4e6ee62d7b119f071a4be9

    • SHA256

      7b7ef0a827b7bf71fa595e2784c11a8ed774af05a56c7335716a326b33b1a6c8

    • SHA512

      850b063a5da6bace934332a828441fa0f69949b53a98a93e5eef9fd44c8fd4a4184d4c2790623e5937105cb2376c1a32438c6a8e46fece589e83258ac13d7f16

    • SSDEEP

      3072:vzwOIi10prcBLGImjWOa5i2IHDoweTT7BzwzCYBuxW1yj6WC/Y8b:vzwkwQLRmJrjoweTTNQ3uxW1t/d

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks