Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    379KB

  • Sample

    230211-pf13hsce67

  • MD5

    07973168e156eb28b965a383d538d48c

  • SHA1

    575e55db7f10ba525d3a2fb4dcaa4d1061bcb627

  • SHA256

    32dcd470f4a41d9520e38dde4e77e873703e10897d7d012e3af0aaa3ddfbc57c

  • SHA512

    4b026411cbc1d1ad35e02f4c8a50a6aaa7fa6b9999459b538068ac14045584628bf909a968544dfaecc6fe375f60a89b02a12a8983a5c1124f21287bd27feca2

  • SSDEEP

    6144:EBqdR7kQNiiZ1T8F6e5Yf4qzal9dKlTRT6h0F:YqXUP061q09wJRg0F

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      file.exe

    • Size

      379KB

    • MD5

      07973168e156eb28b965a383d538d48c

    • SHA1

      575e55db7f10ba525d3a2fb4dcaa4d1061bcb627

    • SHA256

      32dcd470f4a41d9520e38dde4e77e873703e10897d7d012e3af0aaa3ddfbc57c

    • SHA512

      4b026411cbc1d1ad35e02f4c8a50a6aaa7fa6b9999459b538068ac14045584628bf909a968544dfaecc6fe375f60a89b02a12a8983a5c1124f21287bd27feca2

    • SSDEEP

      6144:EBqdR7kQNiiZ1T8F6e5Yf4qzal9dKlTRT6h0F:YqXUP061q09wJRg0F

    Score
    10/10
    smokeloaderbackdoortrojan

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks