General

  • Target

    02e6f6773d57b9fded4c3d4b69b73c38.exe

  • Size

    197KB

  • Sample

    220924-kv1m3sahd5

  • MD5

    02e6f6773d57b9fded4c3d4b69b73c38

  • SHA1

    6b6b9911d11629d860fdd2954ff277698b502456

  • SHA256

    4d9c09ed731c8b464824d40e65ee075022cf76eb08f99484e0604674a086a109

  • SHA512

    1b737161103495838fdcb3737725b313e7302cdf8eb5bb4e21932f8b368e85a0d1a8f2b94d6eb379da3f8a9ceb6923c96c3e1b91c3cbca433a4d389d493bb63b

  • SSDEEP

    3072:/acyUN8LiJ4Ut3Fec850vVs1FPWBG9h1C+DVcwyBQ9Ws/PkF4x:/7oLilt3FeKvs4Gv1COVj9

Malware Config

Targets

    • Target

      02e6f6773d57b9fded4c3d4b69b73c38.exe

    • Size

      197KB

    • MD5

      02e6f6773d57b9fded4c3d4b69b73c38

    • SHA1

      6b6b9911d11629d860fdd2954ff277698b502456

    • SHA256

      4d9c09ed731c8b464824d40e65ee075022cf76eb08f99484e0604674a086a109

    • SHA512

      1b737161103495838fdcb3737725b313e7302cdf8eb5bb4e21932f8b368e85a0d1a8f2b94d6eb379da3f8a9ceb6923c96c3e1b91c3cbca433a4d389d493bb63b

    • SSDEEP

      3072:/acyUN8LiJ4Ut3Fec850vVs1FPWBG9h1C+DVcwyBQ9Ws/PkF4x:/7oLilt3FeKvs4Gv1COVj9

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks