General

  • Target

    73b80707ed4c4a9778a2e3fea2c3fea0f5f3977172259.exe

  • Size

    273KB

  • Sample

    221005-lba4raeagp

  • MD5

    205548e6eb952278c4e629d401e2d25b

  • SHA1

    28efeb8fdf59cf78f33002f368f93e5d082be024

  • SHA256

    73b80707ed4c4a9778a2e3fea2c3fea0f5f39771722591d8899946035a5ea449

  • SHA512

    f3f87e997a5dd8c47c3acd837f699559f1527b4c5c33b459931f050cc6e694c79d953db58b3a60a1a5e7cbdbea7d3effba3f76197413b12bf8e36f64fbeb89b4

  • SSDEEP

    6144:3FU6NULgoqRtLFcxzdQ8+k8ZuzbgwukznwVf:366NU8oqRtmxzdQ8iunnxz

Malware Config

Targets

    • Target

      73b80707ed4c4a9778a2e3fea2c3fea0f5f3977172259.exe

    • Size

      273KB

    • MD5

      205548e6eb952278c4e629d401e2d25b

    • SHA1

      28efeb8fdf59cf78f33002f368f93e5d082be024

    • SHA256

      73b80707ed4c4a9778a2e3fea2c3fea0f5f39771722591d8899946035a5ea449

    • SHA512

      f3f87e997a5dd8c47c3acd837f699559f1527b4c5c33b459931f050cc6e694c79d953db58b3a60a1a5e7cbdbea7d3effba3f76197413b12bf8e36f64fbeb89b4

    • SSDEEP

      6144:3FU6NULgoqRtLFcxzdQ8+k8ZuzbgwukznwVf:366NU8oqRtmxzdQ8iunnxz

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks