General

  • Target

    b2e3044bb3d2c1fbc230806a1f12b34e13ef08f892a1a57050db293b97ba4f6e

  • Size

    327KB

  • Sample

    220928-e74mlsgber

  • MD5

    e1964dd4cf9c96147424db122a1b81e3

  • SHA1

    e6d4555f0ce752884f320ad9dd5d87c19ec2778c

  • SHA256

    b2e3044bb3d2c1fbc230806a1f12b34e13ef08f892a1a57050db293b97ba4f6e

  • SHA512

    619d0c978f71fcf0115e1a8748fca45b3b22416ae52070c828c61079e552686ab153d1d7ff869f399a51504047b24ca391cfc433d239fa28f6aca500563ee2cd

  • SSDEEP

    6144:zs976VYiyJ0GY+tsJY7gxRUE0dnnigabwVfs:zs9u3yqF+2JYiedniB

Malware Config

Targets

    • Target

      b2e3044bb3d2c1fbc230806a1f12b34e13ef08f892a1a57050db293b97ba4f6e

    • Size

      327KB

    • MD5

      e1964dd4cf9c96147424db122a1b81e3

    • SHA1

      e6d4555f0ce752884f320ad9dd5d87c19ec2778c

    • SHA256

      b2e3044bb3d2c1fbc230806a1f12b34e13ef08f892a1a57050db293b97ba4f6e

    • SHA512

      619d0c978f71fcf0115e1a8748fca45b3b22416ae52070c828c61079e552686ab153d1d7ff869f399a51504047b24ca391cfc433d239fa28f6aca500563ee2cd

    • SSDEEP

      6144:zs976VYiyJ0GY+tsJY7gxRUE0dnnigabwVfs:zs9u3yqF+2JYiedniB

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks