General

  • Target

    b71a597bd221bef14a3945cb9d78963f8633194e190ab58e999606b345bb888b

  • Size

    267KB

  • Sample

    220913-jd2y5sfad2

  • MD5

    1a5cc2819098cb9129e7fa9aa8b359ba

  • SHA1

    93684d35c8bb4f3713666bcfd992dadb88504212

  • SHA256

    b71a597bd221bef14a3945cb9d78963f8633194e190ab58e999606b345bb888b

  • SHA512

    89ba5aa8b0d9e04b650bb5ccafa1105ccddf052c1a111eead5cf06bb24cf566edf6491eed2d8a00a468e488b04008a37ad8dbf468859168bd048d2944409b723

  • SSDEEP

    6144:MVEdwJpU1zggrlIAALXL27WUhvxU9JxTdudQHjwZAlV3wL6:MAwg1zg21ALXL27WMKpTd3HCAl

Malware Config

Targets

    • Target

      b71a597bd221bef14a3945cb9d78963f8633194e190ab58e999606b345bb888b

    • Size

      267KB

    • MD5

      1a5cc2819098cb9129e7fa9aa8b359ba

    • SHA1

      93684d35c8bb4f3713666bcfd992dadb88504212

    • SHA256

      b71a597bd221bef14a3945cb9d78963f8633194e190ab58e999606b345bb888b

    • SHA512

      89ba5aa8b0d9e04b650bb5ccafa1105ccddf052c1a111eead5cf06bb24cf566edf6491eed2d8a00a468e488b04008a37ad8dbf468859168bd048d2944409b723

    • SSDEEP

      6144:MVEdwJpU1zggrlIAALXL27WUhvxU9JxTdudQHjwZAlV3wL6:MAwg1zg21ALXL27WMKpTd3HCAl

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks