General

  • Target

    32271dd5f5b2d60c7a0552f1f8afaeb76502a423691d5fad2b1820207a79cfd6

  • Size

    309KB

  • Sample

    220910-clsl4sdbfq

  • MD5

    4ac3579001d86f8365366b3fc7e1ae63

  • SHA1

    afcb976824187062e306cc93b133ab4d2fd2867b

  • SHA256

    32271dd5f5b2d60c7a0552f1f8afaeb76502a423691d5fad2b1820207a79cfd6

  • SHA512

    053b0cb46928f05038742234d3de3bca827607b5d650ce8a3e6bf2398f1c06c04d5d904a3564d0bc0560a75ccf90831ff94b31962f83c2bc6a2e91c485ff2d31

  • SSDEEP

    6144:St1LeI8wXtJ2r+h7my+F6Xvqza24R6Gjvjz5S:SOI8iJ2Ch7/e6XvqzqoGDjQ

Malware Config

Targets

    • Target

      32271dd5f5b2d60c7a0552f1f8afaeb76502a423691d5fad2b1820207a79cfd6

    • Size

      309KB

    • MD5

      4ac3579001d86f8365366b3fc7e1ae63

    • SHA1

      afcb976824187062e306cc93b133ab4d2fd2867b

    • SHA256

      32271dd5f5b2d60c7a0552f1f8afaeb76502a423691d5fad2b1820207a79cfd6

    • SHA512

      053b0cb46928f05038742234d3de3bca827607b5d650ce8a3e6bf2398f1c06c04d5d904a3564d0bc0560a75ccf90831ff94b31962f83c2bc6a2e91c485ff2d31

    • SSDEEP

      6144:St1LeI8wXtJ2r+h7my+F6Xvqza24R6Gjvjz5S:SOI8iJ2Ch7/e6XvqzqoGDjQ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks