General

  • Target

    84b63c4bb83e5e2af2ff58be2c807dadf814e2b88521de4bd511bf0b1e88187e

  • Size

    216KB

  • Sample

    221026-ytbt8aghe7

  • MD5

    41a593a1eac9e6609522589dda9f9324

  • SHA1

    754b16d2e41f41ff7bb422ba98e16f0863ab613b

  • SHA256

    84b63c4bb83e5e2af2ff58be2c807dadf814e2b88521de4bd511bf0b1e88187e

  • SHA512

    ecdcd3bdede0b537a94a7ffed2f70e80782960dc392df913d1b68a8e1387d169a39350833becc28ea961c9d89e0f0f9e398810a717e9bd65786485fb372b7a71

  • SSDEEP

    3072:IVW34GjPyujNUSLV9u6vJ/nv5fxNTtgbwrBO8hGrgGUdtE3l3TouEWl/x:IVCquvLV9uYJ/dPtgbw1JhGnbBTouL/

Malware Config

Targets

    • Target

      84b63c4bb83e5e2af2ff58be2c807dadf814e2b88521de4bd511bf0b1e88187e

    • Size

      216KB

    • MD5

      41a593a1eac9e6609522589dda9f9324

    • SHA1

      754b16d2e41f41ff7bb422ba98e16f0863ab613b

    • SHA256

      84b63c4bb83e5e2af2ff58be2c807dadf814e2b88521de4bd511bf0b1e88187e

    • SHA512

      ecdcd3bdede0b537a94a7ffed2f70e80782960dc392df913d1b68a8e1387d169a39350833becc28ea961c9d89e0f0f9e398810a717e9bd65786485fb372b7a71

    • SSDEEP

      3072:IVW34GjPyujNUSLV9u6vJ/nv5fxNTtgbwrBO8hGrgGUdtE3l3TouEWl/x:IVCquvLV9uYJ/dPtgbw1JhGnbBTouL/

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks