General

  • Target

    fdb3161d0302a57d1587dce9d9dc7385542318b7fa40db95e26ad197d86e3515

  • Size

    268KB

  • Sample

    221009-j4a84sgfb9

  • MD5

    f5d516298cb40b09971e27402c3329a0

  • SHA1

    73bf711cc91d0115375d583d479ddbc7a0344c24

  • SHA256

    fdb3161d0302a57d1587dce9d9dc7385542318b7fa40db95e26ad197d86e3515

  • SHA512

    df902bbac47d526df8e08e7be8df8a2c95353384bfe0f002c136f9c70c7df6049fedb8a92b055ee8a376ec9a8e4cb68b8e87caa4bec7c032c80c50d457d3cf16

  • SSDEEP

    3072:mXKY+5uzq/V/WOyVIetc7MudO/rhGcClh5D30nDG9wz5sl9FfFCVtTHasXB6WM/G:On+Yo9yMMuEu2MwC9Ff4XraqrwVfquS

Malware Config

Targets

    • Target

      fdb3161d0302a57d1587dce9d9dc7385542318b7fa40db95e26ad197d86e3515

    • Size

      268KB

    • MD5

      f5d516298cb40b09971e27402c3329a0

    • SHA1

      73bf711cc91d0115375d583d479ddbc7a0344c24

    • SHA256

      fdb3161d0302a57d1587dce9d9dc7385542318b7fa40db95e26ad197d86e3515

    • SHA512

      df902bbac47d526df8e08e7be8df8a2c95353384bfe0f002c136f9c70c7df6049fedb8a92b055ee8a376ec9a8e4cb68b8e87caa4bec7c032c80c50d457d3cf16

    • SSDEEP

      3072:mXKY+5uzq/V/WOyVIetc7MudO/rhGcClh5D30nDG9wz5sl9FfFCVtTHasXB6WM/G:On+Yo9yMMuEu2MwC9Ff4XraqrwVfquS

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks