General

  • Target
    de6bcee178a8068595f313953944421b.exe
  • Size 272KB
  • Sample221005-lycabsdhg4
  • SHA256 ec95bea63c3311e4b83f37fe2d189c6e06cd258c247faf00f3937c6283607afa
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      de6bcee178a8068595f313953944421b.exe
    • Size 272KB
    • SHA256 ec95bea63c3311e4b83f37fe2d189c6e06cd258c247faf00f3937c6283607afa
    • MD5 SHA1 SHA512 SSDEEP
    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks