General

  • Target

    d493979638fb3983445d462e2cb60a509207055b8128c14e6df1ec8c7db59bb8

  • Size

    280KB

  • Sample

    220916-eq544sefc3

  • MD5

    5409d98f2e1ec335c116878c280d2ba5

  • SHA1

    1604d9e22901eb35f8390e305cbb970c8fe614f8

  • SHA256

    d493979638fb3983445d462e2cb60a509207055b8128c14e6df1ec8c7db59bb8

  • SHA512

    9e3bb1f79e75257371c13954906fbd0aa158b0d28055f3d5ea5c2bf6f6a5e2b73044cc47b83dd583d7dbc0676ea258b788b7b95fd748867f9d03f6353efa8fc9

  • SSDEEP

    3072:Q7CyKcuyyZGpfS0xkvYmv/AL0z1ke1lfYBNpvfWU345nSBM53pMPBrWaO9dBBNx:Z0fzxkvYmv8HGfYNZOc6nSBjBrWX9h

Malware Config

Targets

    • Target

      d493979638fb3983445d462e2cb60a509207055b8128c14e6df1ec8c7db59bb8

    • Size

      280KB

    • MD5

      5409d98f2e1ec335c116878c280d2ba5

    • SHA1

      1604d9e22901eb35f8390e305cbb970c8fe614f8

    • SHA256

      d493979638fb3983445d462e2cb60a509207055b8128c14e6df1ec8c7db59bb8

    • SHA512

      9e3bb1f79e75257371c13954906fbd0aa158b0d28055f3d5ea5c2bf6f6a5e2b73044cc47b83dd583d7dbc0676ea258b788b7b95fd748867f9d03f6353efa8fc9

    • SSDEEP

      3072:Q7CyKcuyyZGpfS0xkvYmv/AL0z1ke1lfYBNpvfWU345nSBM53pMPBrWaO9dBBNx:Z0fzxkvYmv8HGfYNZOc6nSBjBrWX9h

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks