General

  • Target

    5bc5eed2fe541f5d7249dc24f4bc0a84.exe

  • Size

    264KB

  • Sample

    221004-h13zaahbck

  • MD5

    5bc5eed2fe541f5d7249dc24f4bc0a84

  • SHA1

    bb9e3967c71f5b3522ea80a662ecd27fe3023303

  • SHA256

    ed4eac1ad8eb19d06b1e4b8a4eea94aebd41881508c91fa3b44179bf7ded00cd

  • SHA512

    3fdc801c131d0ca5e6b3ebbaedac20176b3501a2d23eca0c3e6d274d1f0ab3fb3278fa62633bb2a388c16dbb7d7e1b0a77b1c8d854367de330e1eb138cfaa818

  • SSDEEP

    6144:mS5fz3IS0lzmPps3ZbEHaKauzbgwu/RhgfwVf:mgfjIS0lz8ps3ZbEHaPunn6

Malware Config

Targets

    • Target

      5bc5eed2fe541f5d7249dc24f4bc0a84.exe

    • Size

      264KB

    • MD5

      5bc5eed2fe541f5d7249dc24f4bc0a84

    • SHA1

      bb9e3967c71f5b3522ea80a662ecd27fe3023303

    • SHA256

      ed4eac1ad8eb19d06b1e4b8a4eea94aebd41881508c91fa3b44179bf7ded00cd

    • SHA512

      3fdc801c131d0ca5e6b3ebbaedac20176b3501a2d23eca0c3e6d274d1f0ab3fb3278fa62633bb2a388c16dbb7d7e1b0a77b1c8d854367de330e1eb138cfaa818

    • SSDEEP

      6144:mS5fz3IS0lzmPps3ZbEHaKauzbgwu/RhgfwVf:mgfjIS0lz8ps3ZbEHaPunn6

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks