General

  • Target

    faac92776c59fe3dafd84af61c9f2b43fab8e71942f5a618fae2c4d2fc6afd85

  • Size

    196KB

  • Sample

    220925-ev6w7sdbg8

  • MD5

    b2bb2f79a44441d1dadeb270703b2170

  • SHA1

    e69c9d20722cd6201a58fc8aad118ed5e0dd0ce7

  • SHA256

    faac92776c59fe3dafd84af61c9f2b43fab8e71942f5a618fae2c4d2fc6afd85

  • SHA512

    a9cf53266117b1a2114aa02e2f30e08dcd3f65bde683ccee0e9dff9a92c8e6a6d0dd2c4013a774e47533b8bad03ace0ee2e25257a04ce8403bda9631f9929505

  • SSDEEP

    3072:vEa6SL3MNRNN5CpZ4seK/+5WIgSCSBz9a/PkkXx:FLaRiG6C

Malware Config

Targets

    • Target

      faac92776c59fe3dafd84af61c9f2b43fab8e71942f5a618fae2c4d2fc6afd85

    • Size

      196KB

    • MD5

      b2bb2f79a44441d1dadeb270703b2170

    • SHA1

      e69c9d20722cd6201a58fc8aad118ed5e0dd0ce7

    • SHA256

      faac92776c59fe3dafd84af61c9f2b43fab8e71942f5a618fae2c4d2fc6afd85

    • SHA512

      a9cf53266117b1a2114aa02e2f30e08dcd3f65bde683ccee0e9dff9a92c8e6a6d0dd2c4013a774e47533b8bad03ace0ee2e25257a04ce8403bda9631f9929505

    • SSDEEP

      3072:vEa6SL3MNRNN5CpZ4seK/+5WIgSCSBz9a/PkkXx:FLaRiG6C

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks