General

  • Target

    490b8976d697a1d531f0942fb585044b94c4faddbb75611ce3d28689789694d5

  • Size

    306KB

  • Sample

    220910-rylfwsacb2

  • MD5

    9c4408e3e19c552d95587e87cb5d0226

  • SHA1

    6b705cfe5b08ca31845e31e78cac021e2bd032f0

  • SHA256

    490b8976d697a1d531f0942fb585044b94c4faddbb75611ce3d28689789694d5

  • SHA512

    067c73189130b87025044d8fc0ff07ddd2181e2ce04956364d0a607ffb3c683629ec6d8822b454d70736351f18441f0f037b1ff03ab37a3f8ff707af7df06171

  • SSDEEP

    6144:a+Ztoi9z6vvJbgzTqNamKCBDv5QLKxfNaKkAWaYqQ5xAa9Qsw:akoi9zkbAGNBnBDveYfAKX3fQPX

Malware Config

Targets

    • Target

      490b8976d697a1d531f0942fb585044b94c4faddbb75611ce3d28689789694d5

    • Size

      306KB

    • MD5

      9c4408e3e19c552d95587e87cb5d0226

    • SHA1

      6b705cfe5b08ca31845e31e78cac021e2bd032f0

    • SHA256

      490b8976d697a1d531f0942fb585044b94c4faddbb75611ce3d28689789694d5

    • SHA512

      067c73189130b87025044d8fc0ff07ddd2181e2ce04956364d0a607ffb3c683629ec6d8822b454d70736351f18441f0f037b1ff03ab37a3f8ff707af7df06171

    • SSDEEP

      6144:a+Ztoi9z6vvJbgzTqNamKCBDv5QLKxfNaKkAWaYqQ5xAa9Qsw:akoi9zkbAGNBnBDveYfAKX3fQPX

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks