General

  • Target

    c6e5dd7e41fb236ed6a0d0d1c5d120cfeba46779995d6b98fbe76668f584b36d

  • Size

    269KB

  • Sample

    221008-wad45afbc2

  • MD5

    8e81e8e7967a07af9e20fdbca3c8e664

  • SHA1

    3498170fa63b7ed0461679769b2f444298458942

  • SHA256

    c6e5dd7e41fb236ed6a0d0d1c5d120cfeba46779995d6b98fbe76668f584b36d

  • SHA512

    3b90fed906359f1f7ba6419fe8c1da3e8bbde1cb1fd54e621363550858e64d1a5e6473720cab7074ba6f177b5aa65243283a710a9d499f10a9c955ec94742fb5

  • SSDEEP

    3072:TXK5UB+RyqcgIE2aIyqJHga5xRS0blRgPNAmb2gUoCxgcIU9jM/h3qpZa9uD6Vdk:LWUB+R0DyqJQ0CAm7w0U9jrwVfXQ

Malware Config

Targets

    • Target

      c6e5dd7e41fb236ed6a0d0d1c5d120cfeba46779995d6b98fbe76668f584b36d

    • Size

      269KB

    • MD5

      8e81e8e7967a07af9e20fdbca3c8e664

    • SHA1

      3498170fa63b7ed0461679769b2f444298458942

    • SHA256

      c6e5dd7e41fb236ed6a0d0d1c5d120cfeba46779995d6b98fbe76668f584b36d

    • SHA512

      3b90fed906359f1f7ba6419fe8c1da3e8bbde1cb1fd54e621363550858e64d1a5e6473720cab7074ba6f177b5aa65243283a710a9d499f10a9c955ec94742fb5

    • SSDEEP

      3072:TXK5UB+RyqcgIE2aIyqJHga5xRS0blRgPNAmb2gUoCxgcIU9jM/h3qpZa9uD6Vdk:LWUB+R0DyqJQ0CAm7w0U9jrwVfXQ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks