General

  • Target

    784810218added7b70a6ee04f7a3000c486d53efddd1a4d4b8bb4228f7a9fb33

  • Size

    146KB

  • Sample

    221001-m9sxwsghek

  • MD5

    bd187b8676c95b8c256d39d36e47a333

  • SHA1

    5f677467dba2bcc270497cb02ab4ad9aaeec3049

  • SHA256

    784810218added7b70a6ee04f7a3000c486d53efddd1a4d4b8bb4228f7a9fb33

  • SHA512

    6eb13eed050bf53101a5622742cbaae7051a570f92bd2f39be38f5524b1d2a77219d68c3d5043c6d14e13f9f2f25b2ad889519557f64db8647918915a8e54884

  • SSDEEP

    3072:pGobx5N/RcnGda+pRPVOUuB4+j/XtzWkVQ6NV:/5FdNpBs2AF9z

Malware Config

Targets

    • Target

      784810218added7b70a6ee04f7a3000c486d53efddd1a4d4b8bb4228f7a9fb33

    • Size

      146KB

    • MD5

      bd187b8676c95b8c256d39d36e47a333

    • SHA1

      5f677467dba2bcc270497cb02ab4ad9aaeec3049

    • SHA256

      784810218added7b70a6ee04f7a3000c486d53efddd1a4d4b8bb4228f7a9fb33

    • SHA512

      6eb13eed050bf53101a5622742cbaae7051a570f92bd2f39be38f5524b1d2a77219d68c3d5043c6d14e13f9f2f25b2ad889519557f64db8647918915a8e54884

    • SSDEEP

      3072:pGobx5N/RcnGda+pRPVOUuB4+j/XtzWkVQ6NV:/5FdNpBs2AF9z

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks