General

  • Target

    0et185f1-e539.exe

  • Size

    290KB

  • Sample

    220912-v3kxpsdga9

  • MD5

    2b70810a70cc56d8802316bcdf827c20

  • SHA1

    84bdb5fbd52a1490f8d7042ff8d40cf0338a6c19

  • SHA256

    3c837751d88e7eba335ac7d555e2cde82455572c3dd55f51972d8a86145c83f8

  • SHA512

    6b46765250d151c3bac99ebc37e617939e5b388c2b706715bd8ea0bb58cf9f09b9342bc066f2bf67d49c386c53bcaf30261af3bc5db9c0a305dfd95cb4424630

  • SSDEEP

    6144:i+FGdZaX9Vj189XJjgolFD1AzcGOpZ7K6nlMR:ivdIVj6ZJjgolFDmcDZ7K6

Malware Config

Targets

    • Target

      0et185f1-e539.exe

    • Size

      290KB

    • MD5

      2b70810a70cc56d8802316bcdf827c20

    • SHA1

      84bdb5fbd52a1490f8d7042ff8d40cf0338a6c19

    • SHA256

      3c837751d88e7eba335ac7d555e2cde82455572c3dd55f51972d8a86145c83f8

    • SHA512

      6b46765250d151c3bac99ebc37e617939e5b388c2b706715bd8ea0bb58cf9f09b9342bc066f2bf67d49c386c53bcaf30261af3bc5db9c0a305dfd95cb4424630

    • SSDEEP

      6144:i+FGdZaX9Vj189XJjgolFD1AzcGOpZ7K6nlMR:ivdIVj6ZJjgolFDmcDZ7K6

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks