General

  • Target

    c12c9f010312887463859f16bf521eb5f784cab7a95d089ac8c5131e1a878218

  • Size

    146KB

  • Sample

    221006-m1wbnahchr

  • MD5

    2c743668fa7ba78ad9f6a17da2f3d539

  • SHA1

    50bf52e01ff521529f58ab5f7bf33cd3ffc6ac06

  • SHA256

    c12c9f010312887463859f16bf521eb5f784cab7a95d089ac8c5131e1a878218

  • SHA512

    1b149764e7d8770b7a6c29382a4852a579d15aeefa4e94fb3dc9aeb4aac6169660c90046f0ee04ae37af5ef341e602ea7a7c8c730c9e518b6d7d5d63b0d0e97b

  • SSDEEP

    3072:x5Aov1jaB+Q9mMKZL0lgLLzNUO9Di3Su3EZE2QnUTO:LP9OmrZovO9DiiodQ

Malware Config

Targets

    • Target

      c12c9f010312887463859f16bf521eb5f784cab7a95d089ac8c5131e1a878218

    • Size

      146KB

    • MD5

      2c743668fa7ba78ad9f6a17da2f3d539

    • SHA1

      50bf52e01ff521529f58ab5f7bf33cd3ffc6ac06

    • SHA256

      c12c9f010312887463859f16bf521eb5f784cab7a95d089ac8c5131e1a878218

    • SHA512

      1b149764e7d8770b7a6c29382a4852a579d15aeefa4e94fb3dc9aeb4aac6169660c90046f0ee04ae37af5ef341e602ea7a7c8c730c9e518b6d7d5d63b0d0e97b

    • SSDEEP

      3072:x5Aov1jaB+Q9mMKZL0lgLLzNUO9Di3Su3EZE2QnUTO:LP9OmrZovO9DiiodQ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks