General

  • Target

    99b107bba532359c0d6be725904a1faeef4cafe566eee2dafda2a1e36b7ce025

  • Size

    213KB

  • Sample

    221016-l8ajgshcb3

  • MD5

    a4ed5cddedb5382fbefd94e5ee579598

  • SHA1

    3128c82c4708cb4c29ba98d5e4d7a0aef240f412

  • SHA256

    99b107bba532359c0d6be725904a1faeef4cafe566eee2dafda2a1e36b7ce025

  • SHA512

    ec635f5a352a55956161ca3b42f97c04f325c87862d361bf2809090f1c281407e5f03d1ac642ca2024faa052ad01c81c016bf5107f2913ce7fd01b6d4b09dcd7

  • SSDEEP

    3072:2XpSNH/irCLUFQnlk6f5U2MgrUzeehGxBWAvCyt0K5bJTo+G8r:eQH/irCLZ3xMdXAbt0Q/r

Malware Config

Targets

    • Target

      99b107bba532359c0d6be725904a1faeef4cafe566eee2dafda2a1e36b7ce025

    • Size

      213KB

    • MD5

      a4ed5cddedb5382fbefd94e5ee579598

    • SHA1

      3128c82c4708cb4c29ba98d5e4d7a0aef240f412

    • SHA256

      99b107bba532359c0d6be725904a1faeef4cafe566eee2dafda2a1e36b7ce025

    • SHA512

      ec635f5a352a55956161ca3b42f97c04f325c87862d361bf2809090f1c281407e5f03d1ac642ca2024faa052ad01c81c016bf5107f2913ce7fd01b6d4b09dcd7

    • SSDEEP

      3072:2XpSNH/irCLUFQnlk6f5U2MgrUzeehGxBWAvCyt0K5bJTo+G8r:eQH/irCLZ3xMdXAbt0Q/r

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks