General

  • Target

    8b4a5f4376c6f00b9181a7a1a899e43d7697f7afb78ffb51a64d699da0b2213c

  • Size

    272KB

  • Sample

    220929-aa3xlaaebj

  • MD5

    9fbb15fe0e322c64e7e8fb45a1493181

  • SHA1

    f9f423a2fba84c868e5664d62998bf8a4ede4423

  • SHA256

    8b4a5f4376c6f00b9181a7a1a899e43d7697f7afb78ffb51a64d699da0b2213c

  • SHA512

    daeaf5a769aff5bbd69e0315e0dd114ec75dd1ec52997cd712a622853cfd03881ece43a8ca5edf6585c20497e31fad47b709d8e8a8f40bfae90d650b1d81a881

  • SSDEEP

    3072:iXhdzNYa1DAChcMiFLq5qgOOswUKfClw12pqZZFhsxkgaBChUpZa9uD6VdyhkgRT:iHqMlcfFJgdUKqW283F2iga3wVfg

Malware Config

Targets

    • Target

      8b4a5f4376c6f00b9181a7a1a899e43d7697f7afb78ffb51a64d699da0b2213c

    • Size

      272KB

    • MD5

      9fbb15fe0e322c64e7e8fb45a1493181

    • SHA1

      f9f423a2fba84c868e5664d62998bf8a4ede4423

    • SHA256

      8b4a5f4376c6f00b9181a7a1a899e43d7697f7afb78ffb51a64d699da0b2213c

    • SHA512

      daeaf5a769aff5bbd69e0315e0dd114ec75dd1ec52997cd712a622853cfd03881ece43a8ca5edf6585c20497e31fad47b709d8e8a8f40bfae90d650b1d81a881

    • SSDEEP

      3072:iXhdzNYa1DAChcMiFLq5qgOOswUKfClw12pqZZFhsxkgaBChUpZa9uD6VdyhkgRT:iHqMlcfFJgdUKqW283F2iga3wVfg

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks