General

  • Target

    3c810705193b5d0b3e8d99a7fd5d614785af87837303b071db0de057dc887959

  • Size

    266KB

  • Sample

    220916-kas3haaghl

  • MD5

    63c1c1b1ac89d60316a6f4cf3552fc05

  • SHA1

    7f461d391a0a53bec8c3a4de83249c5495c7b1a3

  • SHA256

    3c810705193b5d0b3e8d99a7fd5d614785af87837303b071db0de057dc887959

  • SHA512

    0c700a69bb496a515abbccc99c2e09d7e86b40b6c7e62869c60cf2bab661c1872a3393c5f0004f26cbfa854db560dde208a0d3478ca907940d9a811893229497

  • SSDEEP

    3072:oaXjO2vT0rGtQYl5OLgs5wdTE4+ISEETS0tI+/0KP6XwL6VExNM/h3BsxkgaBChd:96rGtsgawdTaIqZtz/0oVXniga+

Malware Config

Targets

    • Target

      3c810705193b5d0b3e8d99a7fd5d614785af87837303b071db0de057dc887959

    • Size

      266KB

    • MD5

      63c1c1b1ac89d60316a6f4cf3552fc05

    • SHA1

      7f461d391a0a53bec8c3a4de83249c5495c7b1a3

    • SHA256

      3c810705193b5d0b3e8d99a7fd5d614785af87837303b071db0de057dc887959

    • SHA512

      0c700a69bb496a515abbccc99c2e09d7e86b40b6c7e62869c60cf2bab661c1872a3393c5f0004f26cbfa854db560dde208a0d3478ca907940d9a811893229497

    • SSDEEP

      3072:oaXjO2vT0rGtQYl5OLgs5wdTE4+ISEETS0tI+/0KP6XwL6VExNM/h3BsxkgaBChd:96rGtsgawdTaIqZtz/0oVXniga+

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks