General

  • Target

    51c70a95690f402c025cdd1516776f14bb8777a2c8d335f98158c3beb61da527

  • Size

    150KB

  • Sample

    220907-aap1qsfhgq

  • MD5

    2c34eac45236ee279ae428d098078103

  • SHA1

    5f50d20fd6ae1e9c9b29010eb212a2ec5656b799

  • SHA256

    51c70a95690f402c025cdd1516776f14bb8777a2c8d335f98158c3beb61da527

  • SHA512

    c0ab43ccb8b86cec91094c70ef634ec0dd4c405f3804d62d628d129657c23424e801de8dbca58352e860dfc472bd69bff017c1afd8b795529323bca766575fc8

  • SSDEEP

    3072:bgLoA17S5LQ0m50GUD7jiEbMDUipG6PYzIFBN+P3iAHwJerddjAyp:bVOULXmJO7jpMQiT5BtJEnjAu

Malware Config

Targets

    • Target

      51c70a95690f402c025cdd1516776f14bb8777a2c8d335f98158c3beb61da527

    • Size

      150KB

    • MD5

      2c34eac45236ee279ae428d098078103

    • SHA1

      5f50d20fd6ae1e9c9b29010eb212a2ec5656b799

    • SHA256

      51c70a95690f402c025cdd1516776f14bb8777a2c8d335f98158c3beb61da527

    • SHA512

      c0ab43ccb8b86cec91094c70ef634ec0dd4c405f3804d62d628d129657c23424e801de8dbca58352e860dfc472bd69bff017c1afd8b795529323bca766575fc8

    • SSDEEP

      3072:bgLoA17S5LQ0m50GUD7jiEbMDUipG6PYzIFBN+P3iAHwJerddjAyp:bVOULXmJO7jpMQiT5BtJEnjAu

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks