General

  • Target

    31d7f2c919449cefe80cf8665c28fa91157f66e525f05f1541d6b418eb5eba93

  • Size

    193KB

  • Sample

    221020-wgaehsgbdq

  • MD5

    03f4134c092371d6b222d53635bbf3ef

  • SHA1

    0112916e2cbd5021769df879eebb82b9a112d0d0

  • SHA256

    31d7f2c919449cefe80cf8665c28fa91157f66e525f05f1541d6b418eb5eba93

  • SHA512

    14eb1afb2f0ca37bca6551b2ff480f4f5326c4c4a173f665bbcea4aeb012fbf8b5b89480dd23f2850380ed83c514c319b8717498e04902b646c95bd592b74d7f

  • SSDEEP

    3072:SXD0zifLQrPNy5/ylxLaHS1BoU063OY0KnIz0Kw3ViogL3Tqn7:SozwL0lhx2WojKy0RFgW7

Malware Config

Targets

    • Target

      31d7f2c919449cefe80cf8665c28fa91157f66e525f05f1541d6b418eb5eba93

    • Size

      193KB

    • MD5

      03f4134c092371d6b222d53635bbf3ef

    • SHA1

      0112916e2cbd5021769df879eebb82b9a112d0d0

    • SHA256

      31d7f2c919449cefe80cf8665c28fa91157f66e525f05f1541d6b418eb5eba93

    • SHA512

      14eb1afb2f0ca37bca6551b2ff480f4f5326c4c4a173f665bbcea4aeb012fbf8b5b89480dd23f2850380ed83c514c319b8717498e04902b646c95bd592b74d7f

    • SSDEEP

      3072:SXD0zifLQrPNy5/ylxLaHS1BoU063OY0KnIz0Kw3ViogL3Tqn7:SozwL0lhx2WojKy0RFgW7

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks