Overview

overview

10

Static

static

7

be09ac0140...71.exe

windows7-x64

10

be09ac0140...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be09ac01404b9a32552b8bea765128a3e197a4bf77e909892d00aa2d157d6871.exe

  • Size

    103KB

  • Sample

    250206-h2mnpaxlas

  • MD5

    b53bbcfca226226405217bba4f8b2532

  • SHA1

    6a84eb91adb4ec5b3b18929fb5e0bfd39cc41fb2

  • SHA256

    be09ac01404b9a32552b8bea765128a3e197a4bf77e909892d00aa2d157d6871

  • SHA512

    f8b51680dbca520ed6877ca5cc1a003258a03bdd802c69985d658375562608c004084463363c9a2ed92b7552c36ba729b1863a1693990186e0f188ff3cc1ec86

  • SSDEEP

    1536:KOhk60PnYkfH77Xcsg23bH/0cRDrKOyaxPoWvVVZ5ElaSePrpf3n3:HuJ/hRvg2TzEla3PVH

Score
10/10
smokeloaderbackdoordiscoverytrojan

Malware Config

Targets

    • Target

      be09ac01404b9a32552b8bea765128a3e197a4bf77e909892d00aa2d157d6871.exe

    • Size

      103KB

    • MD5

      b53bbcfca226226405217bba4f8b2532

    • SHA1

      6a84eb91adb4ec5b3b18929fb5e0bfd39cc41fb2

    • SHA256

      be09ac01404b9a32552b8bea765128a3e197a4bf77e909892d00aa2d157d6871

    • SHA512

      f8b51680dbca520ed6877ca5cc1a003258a03bdd802c69985d658375562608c004084463363c9a2ed92b7552c36ba729b1863a1693990186e0f188ff3cc1ec86

    • SSDEEP

      1536:KOhk60PnYkfH77Xcsg23bH/0cRDrKOyaxPoWvVVZ5ElaSePrpf3n3:HuJ/hRvg2TzEla3PVH

    Score
    10/10
    smokeloaderbackdoordiscoverytrojan

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Smokeloader family

      smokeloader

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks