General

  • Target

    58e803f1162856d0a9382293d2f986abeade8013fded4f0eff486d660654a673

  • Size

    141KB

  • Sample

    220930-hp28lsdfbr

  • MD5

    d8b6d138ee567f99dab20c9bb2b25655

  • SHA1

    77c75dd075f29b1419aba69927bb5afda67f869e

  • SHA256

    58e803f1162856d0a9382293d2f986abeade8013fded4f0eff486d660654a673

  • SHA512

    4efbafa22429da0b4f0d2cefac8530ba6252bfd6472510548fe164827d5152c92a619d3ba12f85cda9f1f3d1ca63efc74166cb1b7d444153b3dbb87e177b329f

  • SSDEEP

    3072:q71U2IbAIu3Gl8RwSAg5k74ZEypX8unupB8HgiwDIO:FbAIu3W7e9OuM8HLi

Malware Config

Targets

    • Target

      58e803f1162856d0a9382293d2f986abeade8013fded4f0eff486d660654a673

    • Size

      141KB

    • MD5

      d8b6d138ee567f99dab20c9bb2b25655

    • SHA1

      77c75dd075f29b1419aba69927bb5afda67f869e

    • SHA256

      58e803f1162856d0a9382293d2f986abeade8013fded4f0eff486d660654a673

    • SHA512

      4efbafa22429da0b4f0d2cefac8530ba6252bfd6472510548fe164827d5152c92a619d3ba12f85cda9f1f3d1ca63efc74166cb1b7d444153b3dbb87e177b329f

    • SSDEEP

      3072:q71U2IbAIu3Gl8RwSAg5k74ZEypX8unupB8HgiwDIO:FbAIu3W7e9OuM8HLi

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks