General

  • Target

    583849669afc93ab0413b76cae28b41d31ddda7bb99cd3e19b07ae96becdcbc1

  • Size

    141KB

  • Sample

    220930-w8gmxafdcj

  • MD5

    507c352cbdd0a18d9eed4f3e22a3a1bd

  • SHA1

    7098f941d634726377ea3b92712beb60e31a5bf5

  • SHA256

    583849669afc93ab0413b76cae28b41d31ddda7bb99cd3e19b07ae96becdcbc1

  • SHA512

    ff3ba59a1cc4bb78baa4c032acfd1f2d0276d53c6e74de58f7389b43e51245284e08b89ba1cd22d9da397bf71f6e19e8989555f6c131043d4d83d6987323b377

  • SSDEEP

    3072:O6OUCktLGR0KKcDDXiutiAR/qGv9TB2mR03VmbLCglKiGK:DtjR1AqGv9TYYamnPlJ

Malware Config

Targets

    • Target

      583849669afc93ab0413b76cae28b41d31ddda7bb99cd3e19b07ae96becdcbc1

    • Size

      141KB

    • MD5

      507c352cbdd0a18d9eed4f3e22a3a1bd

    • SHA1

      7098f941d634726377ea3b92712beb60e31a5bf5

    • SHA256

      583849669afc93ab0413b76cae28b41d31ddda7bb99cd3e19b07ae96becdcbc1

    • SHA512

      ff3ba59a1cc4bb78baa4c032acfd1f2d0276d53c6e74de58f7389b43e51245284e08b89ba1cd22d9da397bf71f6e19e8989555f6c131043d4d83d6987323b377

    • SSDEEP

      3072:O6OUCktLGR0KKcDDXiutiAR/qGv9TB2mR03VmbLCglKiGK:DtjR1AqGv9TYYamnPlJ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks