General

  • Target

    4245e74e8e4b9ab9f52c655e194b66b5b37a2a242da1cca1250f1458561399fa

  • Size

    270KB

  • Sample

    221008-2b7eysgadp

  • MD5

    49f3c2d2fdb5040098e9a8ed102ebf93

  • SHA1

    e4b4412ba00656f3f7b2a480d1e24e7edd5bf6cc

  • SHA256

    4245e74e8e4b9ab9f52c655e194b66b5b37a2a242da1cca1250f1458561399fa

  • SHA512

    9ed3531a4f2d9b981af1f4742e9cc84ec042723c7fbf8825d36d7e918257d5dc93da081fd8668f8cfd7e1cfef93bf88d03f249dca2d7b784ee9d9a0da33723b6

  • SSDEEP

    3072:IXK2+eOz7w2w7x/fBzedh9DUCrh5Iqbr5dS37qaNAeuF8QIHKLyaM/h3qpZa9uDQ:cZ+zu7xg9DmWS7qLeuF85qLTrwVfX

Malware Config

Targets

    • Target

      4245e74e8e4b9ab9f52c655e194b66b5b37a2a242da1cca1250f1458561399fa

    • Size

      270KB

    • MD5

      49f3c2d2fdb5040098e9a8ed102ebf93

    • SHA1

      e4b4412ba00656f3f7b2a480d1e24e7edd5bf6cc

    • SHA256

      4245e74e8e4b9ab9f52c655e194b66b5b37a2a242da1cca1250f1458561399fa

    • SHA512

      9ed3531a4f2d9b981af1f4742e9cc84ec042723c7fbf8825d36d7e918257d5dc93da081fd8668f8cfd7e1cfef93bf88d03f249dca2d7b784ee9d9a0da33723b6

    • SSDEEP

      3072:IXK2+eOz7w2w7x/fBzedh9DUCrh5Iqbr5dS37qaNAeuF8QIHKLyaM/h3qpZa9uDQ:cZ+zu7xg9DmWS7qLeuF85qLTrwVfX

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks