General

  • Target

    f6439395687d750100caa050a1f7c36da6679dd8012e672776e642b1827527c2

  • Size

    291KB

  • Sample

    220912-qge24sdcf7

  • MD5

    5275ca071fc989cf00f7be989ca14cdc

  • SHA1

    7d8a71c19029b743ed440bcc0761edfa162d5a4c

  • SHA256

    f6439395687d750100caa050a1f7c36da6679dd8012e672776e642b1827527c2

  • SHA512

    811eb2e59608268699f334f94098db2181ac6504dec90221f24680fef4a1a92d674e26077d6d8db809cbefb1311064aa6865e0b394e71825136667fbfe9a2f1b

  • SSDEEP

    6144:byo61KIzICQM9nFDm7JduaZsVUoeDSK/lL:ba1jICtxFDm7Jduxul

Malware Config

Targets

    • Target

      f6439395687d750100caa050a1f7c36da6679dd8012e672776e642b1827527c2

    • Size

      291KB

    • MD5

      5275ca071fc989cf00f7be989ca14cdc

    • SHA1

      7d8a71c19029b743ed440bcc0761edfa162d5a4c

    • SHA256

      f6439395687d750100caa050a1f7c36da6679dd8012e672776e642b1827527c2

    • SHA512

      811eb2e59608268699f334f94098db2181ac6504dec90221f24680fef4a1a92d674e26077d6d8db809cbefb1311064aa6865e0b394e71825136667fbfe9a2f1b

    • SSDEEP

      6144:byo61KIzICQM9nFDm7JduaZsVUoeDSK/lL:ba1jICtxFDm7Jduxul

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks