General

  • Target

    a808daaf315ca479ffde8d37dce18e3b.exe

  • Size

    268KB

  • Sample

    220918-x2m2sabfd3

  • MD5

    a808daaf315ca479ffde8d37dce18e3b

  • SHA1

    bb8a0894116c0d027a35aff79bd2bb217d7ccd77

  • SHA256

    26320a82595369f49e3621733ea5867ab5ab65a2db9b13687939361c26067712

  • SHA512

    2cafa79a558f283b513d252a57979e68694542adf666f64b291324236e7f0c1d8c0f05e3d391ad372d78e57cddbe3f126ce5d707644f7e1cac009bc3fb78a88b

  • SSDEEP

    6144:s34eBLYy8pHKgM/BypH9Vf6iW06OigavwVfb:4tEy8VKgGaV7I

Malware Config

Targets

    • Target

      a808daaf315ca479ffde8d37dce18e3b.exe

    • Size

      268KB

    • MD5

      a808daaf315ca479ffde8d37dce18e3b

    • SHA1

      bb8a0894116c0d027a35aff79bd2bb217d7ccd77

    • SHA256

      26320a82595369f49e3621733ea5867ab5ab65a2db9b13687939361c26067712

    • SHA512

      2cafa79a558f283b513d252a57979e68694542adf666f64b291324236e7f0c1d8c0f05e3d391ad372d78e57cddbe3f126ce5d707644f7e1cac009bc3fb78a88b

    • SSDEEP

      6144:s34eBLYy8pHKgM/BypH9Vf6iW06OigavwVfb:4tEy8VKgGaV7I

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks