General

  • Target

    8051665af8bc9766602a1f6e632ce224118350842c76c85bfd19b3fa6b59e42b

  • Size

    293KB

  • Sample

    221008-b4emjaebbm

  • MD5

    52af86c887d0eafc09338b06cf58832c

  • SHA1

    d5aaab3ffe7221419c1ed203033a07f674211258

  • SHA256

    8051665af8bc9766602a1f6e632ce224118350842c76c85bfd19b3fa6b59e42b

  • SHA512

    3fb6b8dacb02e159664032611c94c136fa28eba8f040bb6f51af9ef956a9d09e878809c7766c2b6aa4d6cc48bfd085dfc7cbdb26101be88e003670fd1e6dc97b

  • SSDEEP

    6144:hn4OgZNZOTd3fNeFhqiSxJG5Ml7ITsqeewVf6XO:h0rOqF0V3G2l7RW

Malware Config

Targets

    • Target

      8051665af8bc9766602a1f6e632ce224118350842c76c85bfd19b3fa6b59e42b

    • Size

      293KB

    • MD5

      52af86c887d0eafc09338b06cf58832c

    • SHA1

      d5aaab3ffe7221419c1ed203033a07f674211258

    • SHA256

      8051665af8bc9766602a1f6e632ce224118350842c76c85bfd19b3fa6b59e42b

    • SHA512

      3fb6b8dacb02e159664032611c94c136fa28eba8f040bb6f51af9ef956a9d09e878809c7766c2b6aa4d6cc48bfd085dfc7cbdb26101be88e003670fd1e6dc97b

    • SSDEEP

      6144:hn4OgZNZOTd3fNeFhqiSxJG5Ml7ITsqeewVf6XO:h0rOqF0V3G2l7RW

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks