General

  • Target

    f1d2ad63da5a6ae21f30c90ec8cc4b1d106f84335c86823924f04eeb82ad3bff

  • Size

    132KB

  • Sample

    221002-sgn15adcer

  • MD5

    b780fbb8095c738fa047eaaa7e846039

  • SHA1

    4e2a34f65f34e2f63ca0df5036c48dd9ea5327bf

  • SHA256

    f1d2ad63da5a6ae21f30c90ec8cc4b1d106f84335c86823924f04eeb82ad3bff

  • SHA512

    6e13625dccf306cff3e13845d840870f08569cf79a2d00bead6f3fe335558c433d945e57e75b08212a816720876b499d82a1453fa14ec2a0e745e26276279e9c

  • SSDEEP

    3072:4ywpTGDnR6mIt2ujNyBcvwTVxc4Y8kaNiVVe:kpfjNZwTVxCfVV

Malware Config

Targets

    • Target

      f1d2ad63da5a6ae21f30c90ec8cc4b1d106f84335c86823924f04eeb82ad3bff

    • Size

      132KB

    • MD5

      b780fbb8095c738fa047eaaa7e846039

    • SHA1

      4e2a34f65f34e2f63ca0df5036c48dd9ea5327bf

    • SHA256

      f1d2ad63da5a6ae21f30c90ec8cc4b1d106f84335c86823924f04eeb82ad3bff

    • SHA512

      6e13625dccf306cff3e13845d840870f08569cf79a2d00bead6f3fe335558c433d945e57e75b08212a816720876b499d82a1453fa14ec2a0e745e26276279e9c

    • SSDEEP

      3072:4ywpTGDnR6mIt2ujNyBcvwTVxc4Y8kaNiVVe:kpfjNZwTVxCfVV

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks