General

  • Target

    df19563036cd5d5b80a8a2090061858ad8211ad2b0ac5da3c656fe6f18b4bd40

  • Size

    289KB

  • Sample

    220908-l9bg6sece4

  • MD5

    07437b622e88a3449c7a3fdd0be4447f

  • SHA1

    df5ed03550c2818afa6a14fd6c22c4305c354d3e

  • SHA256

    df19563036cd5d5b80a8a2090061858ad8211ad2b0ac5da3c656fe6f18b4bd40

  • SHA512

    bdf6dbf3bc2eeb118da5a506ce6f272b688493f405ca412445ac41082d9e5d24ee5a53e6f161b7fa287f4acce4eca04e8e526c8f5b1e4684c31240b89fb00cf1

  • SSDEEP

    6144:nhnQCceOF2oyDYPOTFxqey/+SWYdWN9SbNp+Agh4ElfL:2C0F2oyhfqes+S29SbNU5RlD

Malware Config

Targets

    • Target

      df19563036cd5d5b80a8a2090061858ad8211ad2b0ac5da3c656fe6f18b4bd40

    • Size

      289KB

    • MD5

      07437b622e88a3449c7a3fdd0be4447f

    • SHA1

      df5ed03550c2818afa6a14fd6c22c4305c354d3e

    • SHA256

      df19563036cd5d5b80a8a2090061858ad8211ad2b0ac5da3c656fe6f18b4bd40

    • SHA512

      bdf6dbf3bc2eeb118da5a506ce6f272b688493f405ca412445ac41082d9e5d24ee5a53e6f161b7fa287f4acce4eca04e8e526c8f5b1e4684c31240b89fb00cf1

    • SSDEEP

      6144:nhnQCceOF2oyDYPOTFxqey/+SWYdWN9SbNp+Agh4ElfL:2C0F2oyhfqes+S29SbNU5RlD

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks