General

  • Target

    82a53b40e070ad3fb2997db6becaa44a7c8996cd10f085c4eeece94065f3b118

  • Size

    258KB

  • Sample

    220906-zsfx8aabd4

  • MD5

    b550a38ed3a4ff450bfcdaba5898a761

  • SHA1

    501cce4e9cb147b0218c9a0438c2bb605264ce71

  • SHA256

    82a53b40e070ad3fb2997db6becaa44a7c8996cd10f085c4eeece94065f3b118

  • SHA512

    bc816301cb12e13baaa94e4378e16b1205d444f643df56d340cd8abc129130be8211906ea74ca659fbeeefa3feb96b1079b1cd29f78b57ddf94a327fbefbf9b9

  • SSDEEP

    6144:4peF92DLIaICX31o/xHUxXLhf01/vGpat7C:4pu2HJ/X31o/xH2LN7p47C

Malware Config

Targets

    • Target

      82a53b40e070ad3fb2997db6becaa44a7c8996cd10f085c4eeece94065f3b118

    • Size

      258KB

    • MD5

      b550a38ed3a4ff450bfcdaba5898a761

    • SHA1

      501cce4e9cb147b0218c9a0438c2bb605264ce71

    • SHA256

      82a53b40e070ad3fb2997db6becaa44a7c8996cd10f085c4eeece94065f3b118

    • SHA512

      bc816301cb12e13baaa94e4378e16b1205d444f643df56d340cd8abc129130be8211906ea74ca659fbeeefa3feb96b1079b1cd29f78b57ddf94a327fbefbf9b9

    • SSDEEP

      6144:4peF92DLIaICX31o/xHUxXLhf01/vGpat7C:4pu2HJ/X31o/xH2LN7p47C

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks