General

  • Target

    90bcabce2aac7474901d763ae239d93c376fe1869aaf40c8242011fb077e8827

  • Size

    280KB

  • Sample

    220916-brz3psedd4

  • MD5

    8fcad97aa3048165dc57ef91adb75ec5

  • SHA1

    1ef5d0d2df8c86f3288f243f9709bd49df5c7ac9

  • SHA256

    90bcabce2aac7474901d763ae239d93c376fe1869aaf40c8242011fb077e8827

  • SHA512

    17ca9e295d2de681657ba8c64f7597f4b1f8844fc300510871f130e16a8d06375b510baaa264f9a009cd20e2e204505a8352a131009a39fe723c4efe0d3f0f5f

  • SSDEEP

    6144:bdGiwkyYLjUMvitEu5NczriQYYfedI7ud5JV:bdkkyCjUMviVczriQYXdR7J

Malware Config

Targets

    • Target

      90bcabce2aac7474901d763ae239d93c376fe1869aaf40c8242011fb077e8827

    • Size

      280KB

    • MD5

      8fcad97aa3048165dc57ef91adb75ec5

    • SHA1

      1ef5d0d2df8c86f3288f243f9709bd49df5c7ac9

    • SHA256

      90bcabce2aac7474901d763ae239d93c376fe1869aaf40c8242011fb077e8827

    • SHA512

      17ca9e295d2de681657ba8c64f7597f4b1f8844fc300510871f130e16a8d06375b510baaa264f9a009cd20e2e204505a8352a131009a39fe723c4efe0d3f0f5f

    • SSDEEP

      6144:bdGiwkyYLjUMvitEu5NczriQYYfedI7ud5JV:bdkkyCjUMviVczriQYXdR7J

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks