General

  • Target

    33e3e563971bdc12e700b3596a5add6324757f193e7213d07d262c8b69c8a0d4

  • Size

    222KB

  • Sample

    221026-etvsjsegak

  • MD5

    98777c323eafdffe4422ab567a5be035

  • SHA1

    88a98498246eb3f32e8ac32590f731830ce148b7

  • SHA256

    33e3e563971bdc12e700b3596a5add6324757f193e7213d07d262c8b69c8a0d4

  • SHA512

    65719d867d5518c6709cc71269636096e687b5f4e3f7c2f0abac26a11645bcda7640cd1a022f0937c0462e1a64694aa9114b3a9338989d67e2365570b93af56a

  • SSDEEP

    3072:+v7H16LVEyAE7L6OLgD5gV6E5ETywuFbYh/MzzUqdKyPVOp:+v7VEEY7L7LRVU2JsM3XY

Malware Config

Targets

    • Target

      33e3e563971bdc12e700b3596a5add6324757f193e7213d07d262c8b69c8a0d4

    • Size

      222KB

    • MD5

      98777c323eafdffe4422ab567a5be035

    • SHA1

      88a98498246eb3f32e8ac32590f731830ce148b7

    • SHA256

      33e3e563971bdc12e700b3596a5add6324757f193e7213d07d262c8b69c8a0d4

    • SHA512

      65719d867d5518c6709cc71269636096e687b5f4e3f7c2f0abac26a11645bcda7640cd1a022f0937c0462e1a64694aa9114b3a9338989d67e2365570b93af56a

    • SSDEEP

      3072:+v7H16LVEyAE7L6OLgD5gV6E5ETywuFbYh/MzzUqdKyPVOp:+v7VEEY7L7LRVU2JsM3XY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks