Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    196KB

  • Sample

    230209-lghe1sed88

  • MD5

    f7565fefc1fe5ab93fa3cfd1db11b670

  • SHA1

    4e4e99028f92cfe23f168656882424fa12b68e25

  • SHA256

    708d7d560a799f9a5757cec56c31b2418c4482dd08a1533c0f2ec7b2e1257079

  • SHA512

    c8ec933726911efdc55c118a01518cf094193c2782d06d041bb7a2e80934fffd4a7c992d13d78c94cd4d284fa60a513acc04d55ede03fbc48aea150874a042aa

  • SSDEEP

    3072:ySq0OAJciNweKL8JOsW2d5pLdJI5fv1yJBBd+n+t9mg6p0Ee52Pr4:3q0OlFL8AsLLI5n1OFDt/6Fe52z

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      196KB

    • MD5

      f7565fefc1fe5ab93fa3cfd1db11b670

    • SHA1

      4e4e99028f92cfe23f168656882424fa12b68e25

    • SHA256

      708d7d560a799f9a5757cec56c31b2418c4482dd08a1533c0f2ec7b2e1257079

    • SHA512

      c8ec933726911efdc55c118a01518cf094193c2782d06d041bb7a2e80934fffd4a7c992d13d78c94cd4d284fa60a513acc04d55ede03fbc48aea150874a042aa

    • SSDEEP

      3072:ySq0OAJciNweKL8JOsW2d5pLdJI5fv1yJBBd+n+t9mg6p0Ee52Pr4:3q0OlFL8AsLLI5n1OFDt/6Fe52z

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks