General

  • Target

    57e18a4ccb96d79bc6c267934f87df869ce987b816cd73139d854870ed1118d7

  • Size

    305KB

  • Sample

    220908-q9csfsefh9

  • MD5

    760ecf34d0f46130f0d68838ff662bdd

  • SHA1

    e881755c5f220a16db5db09c1f9780b2a62e2c3e

  • SHA256

    57e18a4ccb96d79bc6c267934f87df869ce987b816cd73139d854870ed1118d7

  • SHA512

    d474fae383f5b74231feb5ee2c21122b0dfcb603afc4f71dba90e4f44d3cb03c839244b1134c5d1f925759f3c4ccde1b55887a407cd096108050b374136d6d47

  • SSDEEP

    6144:lMhMDuVuuKTOr6rWLn2D0nq3gYMUbU6vhor3dhUcb:lXDuV2TOu6z2D0nKtb3+Z

Malware Config

Targets

    • Target

      57e18a4ccb96d79bc6c267934f87df869ce987b816cd73139d854870ed1118d7

    • Size

      305KB

    • MD5

      760ecf34d0f46130f0d68838ff662bdd

    • SHA1

      e881755c5f220a16db5db09c1f9780b2a62e2c3e

    • SHA256

      57e18a4ccb96d79bc6c267934f87df869ce987b816cd73139d854870ed1118d7

    • SHA512

      d474fae383f5b74231feb5ee2c21122b0dfcb603afc4f71dba90e4f44d3cb03c839244b1134c5d1f925759f3c4ccde1b55887a407cd096108050b374136d6d47

    • SSDEEP

      6144:lMhMDuVuuKTOr6rWLn2D0nq3gYMUbU6vhor3dhUcb:lXDuV2TOu6z2D0nKtb3+Z

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks