General

  • Target

    cb0c34a05c13caf872821c156c24d32504c4af0dcd18a34b163a461e68778405

  • Size

    306KB

  • Sample

    220908-thlstsfac7

  • MD5

    8cd5dd89a014949d81a3bd426e8beb9f

  • SHA1

    46fdf445e7e63fefcc1e138d706b4b299d0c9064

  • SHA256

    cb0c34a05c13caf872821c156c24d32504c4af0dcd18a34b163a461e68778405

  • SHA512

    115d0a64bb9826f26b5d64b8a8457c4d749545b35dcce249180f3136cea4452a70c9a8e2883cba2ada017c40ed79cd9ec4b8cd794db833440dada3ad16afaf7c

  • SSDEEP

    6144:IehW470bGkNrVFPJkebpTeokAs+fKzNNDFXFCWw:Ig7lkNZxGebpaWjfwN/w

Malware Config

Targets

    • Target

      cb0c34a05c13caf872821c156c24d32504c4af0dcd18a34b163a461e68778405

    • Size

      306KB

    • MD5

      8cd5dd89a014949d81a3bd426e8beb9f

    • SHA1

      46fdf445e7e63fefcc1e138d706b4b299d0c9064

    • SHA256

      cb0c34a05c13caf872821c156c24d32504c4af0dcd18a34b163a461e68778405

    • SHA512

      115d0a64bb9826f26b5d64b8a8457c4d749545b35dcce249180f3136cea4452a70c9a8e2883cba2ada017c40ed79cd9ec4b8cd794db833440dada3ad16afaf7c

    • SSDEEP

      6144:IehW470bGkNrVFPJkebpTeokAs+fKzNNDFXFCWw:Ig7lkNZxGebpaWjfwN/w

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks