General

  • Target
    0270fa061e64b90835ef1cfb28f08b35.exe
  • Size 280KB
  • Sample221005-ttm52afbar
  • SHA256 be7a56309175609baadeef53fc65c6c7301c961fa9568a4e99c000e19ca3ce25
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      0270fa061e64b90835ef1cfb28f08b35.exe
    • Size 280KB
    • SHA256 be7a56309175609baadeef53fc65c6c7301c961fa9568a4e99c000e19ca3ce25
    • MD5 SHA1 SHA512 SSDEEP
    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks