General

  • Target

    56a7fdaa16981b4b7cf02c69f047f5748b57b9bd1e55d468554517fab4133e7f

  • Size

    266KB

  • Sample

    221007-xsrzdaddfn

  • MD5

    f502324258546c1929540508dcf68745

  • SHA1

    74760d3861744f9475ea981c9a709bcec64d2950

  • SHA256

    56a7fdaa16981b4b7cf02c69f047f5748b57b9bd1e55d468554517fab4133e7f

  • SHA512

    bc59b2ad9bf4e3df1d1425b4a3c747c649757d8a27263c3b21f11cf124b95ef97bf79d2e454ef7b6b5eadaf704c3e689937c68e61bd02b046265fec7620676b7

  • SSDEEP

    3072:gXNjfhk8/EIKwotNMm5RU06S2nofDRPD7wugv5hOvvwJB9mhhXcWrxpzbgqrue+z:UNZbothH6Aot5EIJBMmuzbgwuUwVfs

Malware Config

Targets

    • Target

      56a7fdaa16981b4b7cf02c69f047f5748b57b9bd1e55d468554517fab4133e7f

    • Size

      266KB

    • MD5

      f502324258546c1929540508dcf68745

    • SHA1

      74760d3861744f9475ea981c9a709bcec64d2950

    • SHA256

      56a7fdaa16981b4b7cf02c69f047f5748b57b9bd1e55d468554517fab4133e7f

    • SHA512

      bc59b2ad9bf4e3df1d1425b4a3c747c649757d8a27263c3b21f11cf124b95ef97bf79d2e454ef7b6b5eadaf704c3e689937c68e61bd02b046265fec7620676b7

    • SSDEEP

      3072:gXNjfhk8/EIKwotNMm5RU06S2nofDRPD7wugv5hOvvwJB9mhhXcWrxpzbgqrue+z:UNZbothH6Aot5EIJBMmuzbgwuUwVfs

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks