General

  • Target

    4080f4baddaef5ca07460bb36c8b2069b0fc6a33c76881b123d12f585f6eb30d

  • Size

    264KB

  • Sample

    221004-bjtkysfba5

  • MD5

    023e7cfdb0ac94aa81b53c6e7505ab39

  • SHA1

    aaa2dffa78a314d1b9466626496f8ac867fcb587

  • SHA256

    4080f4baddaef5ca07460bb36c8b2069b0fc6a33c76881b123d12f585f6eb30d

  • SHA512

    d149e05227d703f9987ddb3f127e070c93c9ac88739d1a16ebb4badf13c186a115469579d371a1cb369bb6974a7e86c3780181372d72fe304d79b5c11fdcf4d9

  • SSDEEP

    6144:9aCou9po602xLlytauzbgwuE6RCTBtwVf:9DoWo6jLEAunnV68

Malware Config

Targets

    • Target

      4080f4baddaef5ca07460bb36c8b2069b0fc6a33c76881b123d12f585f6eb30d

    • Size

      264KB

    • MD5

      023e7cfdb0ac94aa81b53c6e7505ab39

    • SHA1

      aaa2dffa78a314d1b9466626496f8ac867fcb587

    • SHA256

      4080f4baddaef5ca07460bb36c8b2069b0fc6a33c76881b123d12f585f6eb30d

    • SHA512

      d149e05227d703f9987ddb3f127e070c93c9ac88739d1a16ebb4badf13c186a115469579d371a1cb369bb6974a7e86c3780181372d72fe304d79b5c11fdcf4d9

    • SSDEEP

      6144:9aCou9po602xLlytauzbgwuE6RCTBtwVf:9DoWo6jLEAunnV68

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks