Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    207042a4dfd4d096e220b218e4969fc819afecca1dbda192991357896ffd28dd

  • Size

    3.0MB

  • Sample

    240525-xns1waee7s

  • MD5

    6d847896c20eb21cf6dc6a924138ef32

  • SHA1

    c254273ecdb71e8d9097f726739036a94dd84a90

  • SHA256

    207042a4dfd4d096e220b218e4969fc819afecca1dbda192991357896ffd28dd

  • SHA512

    92074de4057f7519cae0eded975479dce2021088b6560f30be8a673fd79c0db4384ff6c09ae81cdba9b61c34415a839a089f6ef05636215ccaf9fc2400d42bf6

  • SSDEEP

    98304:sfUbPHsTPGQE5rSKvY7FPmCOAJC+v6jJcmDcaS:sfUITl4YthO+Ca6VcmcL

Score
10/10
smokeloaderbackdoortrojan

Malware Config

Targets

    • Target

      207042a4dfd4d096e220b218e4969fc819afecca1dbda192991357896ffd28dd

    • Size

      3.0MB

    • MD5

      6d847896c20eb21cf6dc6a924138ef32

    • SHA1

      c254273ecdb71e8d9097f726739036a94dd84a90

    • SHA256

      207042a4dfd4d096e220b218e4969fc819afecca1dbda192991357896ffd28dd

    • SHA512

      92074de4057f7519cae0eded975479dce2021088b6560f30be8a673fd79c0db4384ff6c09ae81cdba9b61c34415a839a089f6ef05636215ccaf9fc2400d42bf6

    • SSDEEP

      98304:sfUbPHsTPGQE5rSKvY7FPmCOAJC+v6jJcmDcaS:sfUITl4YthO+Ca6VcmcL

    Score
    10/10
    smokeloaderbackdoortrojan

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks