General

  • Target

    41b3089c79cd37e71f947864a55acc55779c9843da199806b4cf363a9af17497

  • Size

    265KB

  • Sample

    221004-s6681abfhq

  • MD5

    885f225be08a89a2cb3239a4d2aab919

  • SHA1

    0f28236d6c0131329ed3f3af124e81f605df4031

  • SHA256

    41b3089c79cd37e71f947864a55acc55779c9843da199806b4cf363a9af17497

  • SHA512

    f238fdc0691b3945d82e0c01cfaa21c30db3b374b0b2a42b9e620ea169b061a576656aa4bbcbe14f34673c1c4eed22b0cd1d700b7e9f9367a0128cedda71ffe6

  • SSDEEP

    6144:9+xLfNvkV8XvRDFgM04F8fuzbgwuC7849AwVf:9SJvkV8XpR304Ounn784

Malware Config

Targets

    • Target

      41b3089c79cd37e71f947864a55acc55779c9843da199806b4cf363a9af17497

    • Size

      265KB

    • MD5

      885f225be08a89a2cb3239a4d2aab919

    • SHA1

      0f28236d6c0131329ed3f3af124e81f605df4031

    • SHA256

      41b3089c79cd37e71f947864a55acc55779c9843da199806b4cf363a9af17497

    • SHA512

      f238fdc0691b3945d82e0c01cfaa21c30db3b374b0b2a42b9e620ea169b061a576656aa4bbcbe14f34673c1c4eed22b0cd1d700b7e9f9367a0128cedda71ffe6

    • SSDEEP

      6144:9+xLfNvkV8XvRDFgM04F8fuzbgwuC7849AwVf:9SJvkV8XpR304Ounn784

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks