Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    196KB

  • Sample

    230209-g4xe8sfg98

  • MD5

    b8b3e591802e185bf74627c0d01adc06

  • SHA1

    adf4eb7409ff950f1e7172863c78b09ab67a7606

  • SHA256

    594570e97b5ad499baec0899a67b8435e185f3345fd73ef692b1919d24ce48fa

  • SHA512

    e0d78c90e182aac599a31b273facd226cdd6a75ec3bc5476f4f88ccb65a5b9335dd908c1728a8d5770d86d245089d32a7fe42e6875740dc4b80eb7019d0d4015

  • SSDEEP

    3072:1RGPORvVi5+dOKL8OQWKd56BSmF0XeCEiCQ/z0dFfpWUJf/Ebn88t:3GPsBVLZQ6litwFfpjJnw7

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      196KB

    • MD5

      b8b3e591802e185bf74627c0d01adc06

    • SHA1

      adf4eb7409ff950f1e7172863c78b09ab67a7606

    • SHA256

      594570e97b5ad499baec0899a67b8435e185f3345fd73ef692b1919d24ce48fa

    • SHA512

      e0d78c90e182aac599a31b273facd226cdd6a75ec3bc5476f4f88ccb65a5b9335dd908c1728a8d5770d86d245089d32a7fe42e6875740dc4b80eb7019d0d4015

    • SSDEEP

      3072:1RGPORvVi5+dOKL8OQWKd56BSmF0XeCEiCQ/z0dFfpWUJf/Ebn88t:3GPsBVLZQ6litwFfpjJnw7

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks