General

  • Target

    d401c95bb3f29d359ee3507a42394736f7f5b46be494ffa314de8ace02f4e62d

  • Size

    266KB

  • Sample

    220913-fg66gsefg3

  • MD5

    7d225e5f77e853c6a16ce0d49267e5d9

  • SHA1

    f7ebb901a0d6ee810d3e0ff8177f34dd49841a31

  • SHA256

    d401c95bb3f29d359ee3507a42394736f7f5b46be494ffa314de8ace02f4e62d

  • SHA512

    24424fd703ac593725d3bc7a7768722a4fba9b64b4c9606b6f82f342b5725b653b222745550b1d1e92d2c2d862a87533b8509105d17b3dacce9a0cf343aaeac1

  • SSDEEP

    6144:pPEE8OYQC1qCuMHMPlldchvtMve9AATDHMNPOGlQ63xZlHH:pL8D1qCuYmzchvtoe9AAXW2GldHl

Malware Config

Targets

    • Target

      d401c95bb3f29d359ee3507a42394736f7f5b46be494ffa314de8ace02f4e62d

    • Size

      266KB

    • MD5

      7d225e5f77e853c6a16ce0d49267e5d9

    • SHA1

      f7ebb901a0d6ee810d3e0ff8177f34dd49841a31

    • SHA256

      d401c95bb3f29d359ee3507a42394736f7f5b46be494ffa314de8ace02f4e62d

    • SHA512

      24424fd703ac593725d3bc7a7768722a4fba9b64b4c9606b6f82f342b5725b653b222745550b1d1e92d2c2d862a87533b8509105d17b3dacce9a0cf343aaeac1

    • SSDEEP

      6144:pPEE8OYQC1qCuMHMPlldchvtMve9AATDHMNPOGlQ63xZlHH:pL8D1qCuYmzchvtoe9AAXW2GldHl

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks