General

  • Target

    ae7ff005c5ed1312b8beeeefca8150e0e9f19452063246688f51359604de573b

  • Size

    207KB

  • Sample

    220909-snh4fsccbp

  • MD5

    ca34c356ace5e6ed8104a83f15a712cb

  • SHA1

    83e4029c214e73945e94a194c47f2a8dd502e65c

  • SHA256

    ae7ff005c5ed1312b8beeeefca8150e0e9f19452063246688f51359604de573b

  • SHA512

    5676d06e4e5a8a1467ca7fed46c7ad537d9cdfa4d89d19a810503fec98ad84d92faa9d684bb07f54f56ec4c77e2d89970d21e0a0b2f7a062ae8acaeb429f2256

  • SSDEEP

    3072:Qcp7YtZVvkdTpK6LW35AoBGVw1YWukc/GVDjjHVud1paWv2aotM2U:CGddK6XjCasc/GVnjV61pa62aF

Malware Config

Targets

    • Target

      ae7ff005c5ed1312b8beeeefca8150e0e9f19452063246688f51359604de573b

    • Size

      207KB

    • MD5

      ca34c356ace5e6ed8104a83f15a712cb

    • SHA1

      83e4029c214e73945e94a194c47f2a8dd502e65c

    • SHA256

      ae7ff005c5ed1312b8beeeefca8150e0e9f19452063246688f51359604de573b

    • SHA512

      5676d06e4e5a8a1467ca7fed46c7ad537d9cdfa4d89d19a810503fec98ad84d92faa9d684bb07f54f56ec4c77e2d89970d21e0a0b2f7a062ae8acaeb429f2256

    • SSDEEP

      3072:Qcp7YtZVvkdTpK6LW35AoBGVw1YWukc/GVDjjHVud1paWv2aotM2U:CGddK6XjCasc/GVnjV61pa62aF

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks