General

  • Target

    451c297be1d5a72b3cece660b8ffaddadaf95447f072c2765073865a637b5075

  • Size

    267KB

  • Sample

    221007-hazh6sbgc8

  • MD5

    31493a2c14069e81396cc4c4658dabf4

  • SHA1

    640351c768401364a02d9d099a100a61b376d9f0

  • SHA256

    451c297be1d5a72b3cece660b8ffaddadaf95447f072c2765073865a637b5075

  • SHA512

    e0e9935e3554a9a0163974baf94ee09dfb240ecd4c4aa4924eb2a646ef910b52334ffa9eacea54019925fda9436102214059ffaf7464e59fa683e92f74e628a6

  • SSDEEP

    6144:0ujnNNcT0OX5Cr3Nur2CfJePuzbgwug9ifxGDwVfU:0mNOAZrdzIAPunnj8f8

Malware Config

Targets

    • Target

      451c297be1d5a72b3cece660b8ffaddadaf95447f072c2765073865a637b5075

    • Size

      267KB

    • MD5

      31493a2c14069e81396cc4c4658dabf4

    • SHA1

      640351c768401364a02d9d099a100a61b376d9f0

    • SHA256

      451c297be1d5a72b3cece660b8ffaddadaf95447f072c2765073865a637b5075

    • SHA512

      e0e9935e3554a9a0163974baf94ee09dfb240ecd4c4aa4924eb2a646ef910b52334ffa9eacea54019925fda9436102214059ffaf7464e59fa683e92f74e628a6

    • SSDEEP

      6144:0ujnNNcT0OX5Cr3Nur2CfJePuzbgwug9ifxGDwVfU:0mNOAZrdzIAPunnj8f8

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks