General

  • Target

    9e1cef9f11bdb8587fe39242788911035e8b84d3cd009f3073052da4f15a7c6a

  • Size

    142KB

  • Sample

    220930-bmdnxacce2

  • MD5

    7eb2a82944b57c76d89ef7cdc714c0a2

  • SHA1

    9f6085d4eb05577dc9a8ac0d80a5ade568aa7f78

  • SHA256

    9e1cef9f11bdb8587fe39242788911035e8b84d3cd009f3073052da4f15a7c6a

  • SHA512

    a9b7eca102c488f24e900a54d8c3b0ba6ffb1816f15c38149f5803ef31e3b06542cfc151a42fd970a55d8bd7f3306825efb2c8da08a73a212095126c73a0ae31

  • SSDEEP

    3072:ZYlBBrFFMwRlR6fr8H/k26OSN6AwX5FGh03hI3q2:ZYlFFb6dq5Fn2a2

Malware Config

Targets

    • Target

      9e1cef9f11bdb8587fe39242788911035e8b84d3cd009f3073052da4f15a7c6a

    • Size

      142KB

    • MD5

      7eb2a82944b57c76d89ef7cdc714c0a2

    • SHA1

      9f6085d4eb05577dc9a8ac0d80a5ade568aa7f78

    • SHA256

      9e1cef9f11bdb8587fe39242788911035e8b84d3cd009f3073052da4f15a7c6a

    • SHA512

      a9b7eca102c488f24e900a54d8c3b0ba6ffb1816f15c38149f5803ef31e3b06542cfc151a42fd970a55d8bd7f3306825efb2c8da08a73a212095126c73a0ae31

    • SSDEEP

      3072:ZYlBBrFFMwRlR6fr8H/k26OSN6AwX5FGh03hI3q2:ZYlFFb6dq5Fn2a2

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks