General

  • Target

    372ef6fd2491ccf2a8957f34bb8f7c61

  • Size

    229KB

  • Sample

    221019-klfasafbb3

  • MD5

    372ef6fd2491ccf2a8957f34bb8f7c61

  • SHA1

    2a24a9d9c53d024597b5478e1b9262bcc04f2bde

  • SHA256

    89342f18889aa536acb26511498e3e2fb0da442891c41d4605cc39d36c073245

  • SHA512

    be1469848d92636dee92f7e60c898e499f9451ef4f5c4be6510871f5b341b5799e3305744df33ad9c18cdd2a1463091483644415ac904cfcec690362462fc7b1

  • SSDEEP

    3072:E92n8hhOTUeAaN1MjL9NLi/W0xjF1FnFIWATy23rITKllITtP2aJoA2:E9KqSoa3ILTi/ZjnFnAVbhTITtP2coA

Malware Config

Targets

    • Target

      372ef6fd2491ccf2a8957f34bb8f7c61

    • Size

      229KB

    • MD5

      372ef6fd2491ccf2a8957f34bb8f7c61

    • SHA1

      2a24a9d9c53d024597b5478e1b9262bcc04f2bde

    • SHA256

      89342f18889aa536acb26511498e3e2fb0da442891c41d4605cc39d36c073245

    • SHA512

      be1469848d92636dee92f7e60c898e499f9451ef4f5c4be6510871f5b341b5799e3305744df33ad9c18cdd2a1463091483644415ac904cfcec690362462fc7b1

    • SSDEEP

      3072:E92n8hhOTUeAaN1MjL9NLi/W0xjF1FnFIWATy23rITKllITtP2aJoA2:E9KqSoa3ILTi/ZjnFnAVbhTITtP2coA

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks