General

  • Target

    6e45a065d94b2f1899a9502ca4893bf9.bin

  • Size

    145KB

  • Sample

    221020-v1fvzafdc7

  • MD5

    6e45a065d94b2f1899a9502ca4893bf9

  • SHA1

    b3a19a13662471422decbf3955f01d916fc8f56b

  • SHA256

    788a52b45b59f4900036de9cadf340f7b498af78d9473ed61a00869a9c04453e

  • SHA512

    2f16e7790426796ae59612b38fcd7bda5f13da6ebc57cdd9a5a9bf11be6f38cfe8539c981d9a5bf5a3f1bd07693d95eb6f8e0dd5ad926b0a033a37c0afb341e7

  • SSDEEP

    3072:as+ZlwYZL/DV14Pp2p6uiYsMDDGlW0JjaDChYO:ass/DH4x7YsyDskChY

Malware Config

Targets

    • Target

      6e45a065d94b2f1899a9502ca4893bf9.bin

    • Size

      145KB

    • MD5

      6e45a065d94b2f1899a9502ca4893bf9

    • SHA1

      b3a19a13662471422decbf3955f01d916fc8f56b

    • SHA256

      788a52b45b59f4900036de9cadf340f7b498af78d9473ed61a00869a9c04453e

    • SHA512

      2f16e7790426796ae59612b38fcd7bda5f13da6ebc57cdd9a5a9bf11be6f38cfe8539c981d9a5bf5a3f1bd07693d95eb6f8e0dd5ad926b0a033a37c0afb341e7

    • SSDEEP

      3072:as+ZlwYZL/DV14Pp2p6uiYsMDDGlW0JjaDChYO:ass/DH4x7YsyDskChY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks