General

  • Target

    b3c35c1f524a1d33fea8c9137b3ca35c609cb3e7c775e1e455cbadc32de844eb

  • Size

    250KB

  • Sample

    220913-zglpbscddp

  • MD5

    567be6e2a44fc0c00828e468e47f540d

  • SHA1

    a72c7fe6d30b84f976b1d6930b6f5432b85505e9

  • SHA256

    b3c35c1f524a1d33fea8c9137b3ca35c609cb3e7c775e1e455cbadc32de844eb

  • SHA512

    0207b7aa3c4ad4df3e55c1ca41675212b3dd2ccc7273e0f6600b84f7d9ee636d9dcedd4cb03ccd1661c01de4c42676f2f88d0758fd5598e7a8ed98520a1f9306

  • SSDEEP

    6144:wi4c+RNKzi5ascp5Ezx3Oc40+3in6A34in:BYR4ziIsy54J40uAz

Malware Config

Targets

    • Target

      b3c35c1f524a1d33fea8c9137b3ca35c609cb3e7c775e1e455cbadc32de844eb

    • Size

      250KB

    • MD5

      567be6e2a44fc0c00828e468e47f540d

    • SHA1

      a72c7fe6d30b84f976b1d6930b6f5432b85505e9

    • SHA256

      b3c35c1f524a1d33fea8c9137b3ca35c609cb3e7c775e1e455cbadc32de844eb

    • SHA512

      0207b7aa3c4ad4df3e55c1ca41675212b3dd2ccc7273e0f6600b84f7d9ee636d9dcedd4cb03ccd1661c01de4c42676f2f88d0758fd5598e7a8ed98520a1f9306

    • SSDEEP

      6144:wi4c+RNKzi5ascp5Ezx3Oc40+3in6A34in:BYR4ziIsy54J40uAz

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks