Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    313KB

  • Sample

    230208-p1rpksac2s

  • MD5

    a21331c7c9323667b5248df2567a343c

  • SHA1

    3ab65da20b8f3dcbc9190a7c4de0729b407a298d

  • SHA256

    7e7af2c0f792b6fe5db5ea9b6d4b4ac159f800a9d13f6016180a4122dcf9c6dc

  • SHA512

    cf8b0a61d2860259c2c7f58cedf3260495b159566f6a5262925d1051e9b4e2e4ccd6d5392c8881b436d7022c76d655fcd3d520128298fdaef63b706d7df1ffaa

  • SSDEEP

    3072:wwwqToDZ4gGtRlNUqjgAJrCkEAreqAcWv/VN3/dfvoWByUAl1PuBWnU:w9kC1QNJjgAB9xqlv/fFfAWUj2In

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      313KB

    • MD5

      a21331c7c9323667b5248df2567a343c

    • SHA1

      3ab65da20b8f3dcbc9190a7c4de0729b407a298d

    • SHA256

      7e7af2c0f792b6fe5db5ea9b6d4b4ac159f800a9d13f6016180a4122dcf9c6dc

    • SHA512

      cf8b0a61d2860259c2c7f58cedf3260495b159566f6a5262925d1051e9b4e2e4ccd6d5392c8881b436d7022c76d655fcd3d520128298fdaef63b706d7df1ffaa

    • SSDEEP

      3072:wwwqToDZ4gGtRlNUqjgAJrCkEAreqAcWv/VN3/dfvoWByUAl1PuBWnU:w9kC1QNJjgAB9xqlv/fFfAWUj2In

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks