General

  • Target

    03123c00ff11899227784ad5bb3218a9be2a1fee578b7df39c7f8d327754a6f0

  • Size

    303KB

  • Sample

    220911-tpzy2affcn

  • MD5

    9d4363546d135e55e303679e0c789b71

  • SHA1

    9d37454ece7a69e90e486c7bcf44f65a527f3810

  • SHA256

    03123c00ff11899227784ad5bb3218a9be2a1fee578b7df39c7f8d327754a6f0

  • SHA512

    2332f99dbd29f4d0ed7beb3112c46a37d259ce00b8844f9da65f9058b2bc000e2c792521915db01414e9ce9a3d8c9dced7644902a0efc081f8f2e581d44ba603

  • SSDEEP

    6144:TLutscNqNtnBhQws9mI74XYPXDLyOJEXD4DZs:PhUqDnBhQVwI0XYPXDLfyD4

Malware Config

Targets

    • Target

      03123c00ff11899227784ad5bb3218a9be2a1fee578b7df39c7f8d327754a6f0

    • Size

      303KB

    • MD5

      9d4363546d135e55e303679e0c789b71

    • SHA1

      9d37454ece7a69e90e486c7bcf44f65a527f3810

    • SHA256

      03123c00ff11899227784ad5bb3218a9be2a1fee578b7df39c7f8d327754a6f0

    • SHA512

      2332f99dbd29f4d0ed7beb3112c46a37d259ce00b8844f9da65f9058b2bc000e2c792521915db01414e9ce9a3d8c9dced7644902a0efc081f8f2e581d44ba603

    • SSDEEP

      6144:TLutscNqNtnBhQws9mI74XYPXDLyOJEXD4DZs:PhUqDnBhQVwI0XYPXDLfyD4

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks