General

  • Target

    35aa0b0725c1471afdba1f38a90808c15360c6eb68e86f28bad7d9738ae2a477

  • Size

    266KB

  • Sample

    220913-c5kqlseee4

  • MD5

    eebdc478e994f86dfba81c9b131c1ba7

  • SHA1

    bc4ae2a82fbd1d8a124924963b2aed8f9ae8bfb1

  • SHA256

    35aa0b0725c1471afdba1f38a90808c15360c6eb68e86f28bad7d9738ae2a477

  • SHA512

    70998a9e8672b31f9559aaff2077f345cd3e03df55672e5c560a81a672b3d6f9bcc85b7f91309e62defdf6ea2f3c36de1f1df3a246d0c3fd24ff3572945afa35

  • SSDEEP

    6144:kfvPgzci9t7JOlRcrcUKB/lzjIrg4oHXKrXrv:AAci9t7cvcrcUKB/lYreaDT

Malware Config

Targets

    • Target

      35aa0b0725c1471afdba1f38a90808c15360c6eb68e86f28bad7d9738ae2a477

    • Size

      266KB

    • MD5

      eebdc478e994f86dfba81c9b131c1ba7

    • SHA1

      bc4ae2a82fbd1d8a124924963b2aed8f9ae8bfb1

    • SHA256

      35aa0b0725c1471afdba1f38a90808c15360c6eb68e86f28bad7d9738ae2a477

    • SHA512

      70998a9e8672b31f9559aaff2077f345cd3e03df55672e5c560a81a672b3d6f9bcc85b7f91309e62defdf6ea2f3c36de1f1df3a246d0c3fd24ff3572945afa35

    • SSDEEP

      6144:kfvPgzci9t7JOlRcrcUKB/lzjIrg4oHXKrXrv:AAci9t7cvcrcUKB/lYreaDT

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks