General

  • Target

    0b31c47626d81d44ce68154e0040397853266c6375fb5d1d0244aa2f447b5852

  • Size

    145KB

  • Sample

    221006-nr678shca9

  • MD5

    58f3d619b4bceb1da37253110727f869

  • SHA1

    01c1767b0d7dda34c7e768a06a920c6144f767ba

  • SHA256

    0b31c47626d81d44ce68154e0040397853266c6375fb5d1d0244aa2f447b5852

  • SHA512

    9ebf94ab2b017c90b55c1d3621eccc387ecf2a922e3cb45b89ac599f03efb1cfc189c3e9406743e0be593047e2fa96f22fa908b772817b274088f8ab4cb20cc8

  • SSDEEP

    3072:d2kXU46vGB+mYkfSGo2Vp3Va2zJ7lr0Psr3KSEkO:AKWvER5To2N7lrP6c

Malware Config

Targets

    • Target

      0b31c47626d81d44ce68154e0040397853266c6375fb5d1d0244aa2f447b5852

    • Size

      145KB

    • MD5

      58f3d619b4bceb1da37253110727f869

    • SHA1

      01c1767b0d7dda34c7e768a06a920c6144f767ba

    • SHA256

      0b31c47626d81d44ce68154e0040397853266c6375fb5d1d0244aa2f447b5852

    • SHA512

      9ebf94ab2b017c90b55c1d3621eccc387ecf2a922e3cb45b89ac599f03efb1cfc189c3e9406743e0be593047e2fa96f22fa908b772817b274088f8ab4cb20cc8

    • SSDEEP

      3072:d2kXU46vGB+mYkfSGo2Vp3Va2zJ7lr0Psr3KSEkO:AKWvER5To2N7lrP6c

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks