General

  • Target

    5993bf508c973f913259ef4b9a269594ed68a03a0162588287b65bbd5f35faf9

  • Size

    146KB

  • Sample

    221003-vryz7agcf9

  • MD5

    1b144c4e07a4354d69e8d49e5f52a2c3

  • SHA1

    10da17fb2cac6a34f6b8628af1a7e134bc6d7100

  • SHA256

    5993bf508c973f913259ef4b9a269594ed68a03a0162588287b65bbd5f35faf9

  • SHA512

    b346a343125096c7c9cc928ed63155a001e658cf564a03560dba4ccc5c517dd5196392555eee58212889e0be21b44108a5fe09591f08aaccdd84e9c7eb952f1f

  • SSDEEP

    3072:sOFiPKjiyvwMuJMJ+HXFsneQQLqibh46S83br35+WfizjPO:sOF7uGYyuVsrEFS83HJ+d3

Malware Config

Targets

    • Target

      5993bf508c973f913259ef4b9a269594ed68a03a0162588287b65bbd5f35faf9

    • Size

      146KB

    • MD5

      1b144c4e07a4354d69e8d49e5f52a2c3

    • SHA1

      10da17fb2cac6a34f6b8628af1a7e134bc6d7100

    • SHA256

      5993bf508c973f913259ef4b9a269594ed68a03a0162588287b65bbd5f35faf9

    • SHA512

      b346a343125096c7c9cc928ed63155a001e658cf564a03560dba4ccc5c517dd5196392555eee58212889e0be21b44108a5fe09591f08aaccdd84e9c7eb952f1f

    • SSDEEP

      3072:sOFiPKjiyvwMuJMJ+HXFsneQQLqibh46S83br35+WfizjPO:sOF7uGYyuVsrEFS83HJ+d3

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks