General

  • Target

    8ae685b47e90fb495ad242cdb489839a21cee0e98291d5bafe8744c2e35cd802

  • Size

    260KB

  • Sample

    221029-f7bghadeaq

  • MD5

    bd7c5203e413c9fb00714a58b2117817

  • SHA1

    26283ad1fc1fc3cc68a85e1f9ac5558828f18197

  • SHA256

    8ae685b47e90fb495ad242cdb489839a21cee0e98291d5bafe8744c2e35cd802

  • SHA512

    8446e9ab3a062b67fa264fd933c8dee93ebf5c2a0497b8a3e2caf7c3dbf7701c1602a69f6e7d544757c7717ff5b9c0f08209b8c52a7d8287dcc7b5e6e266509d

  • SSDEEP

    3072:P7yxBqEgLpf7xEz5HCq+WYMSK5CGRJVJ6lKG9WrdWx9ks6NJfMWSm7myM/h3:OxBPgLZ7B54P5NRJVJ6RU0ks6XnSmay

Malware Config

Targets

    • Target

      8ae685b47e90fb495ad242cdb489839a21cee0e98291d5bafe8744c2e35cd802

    • Size

      260KB

    • MD5

      bd7c5203e413c9fb00714a58b2117817

    • SHA1

      26283ad1fc1fc3cc68a85e1f9ac5558828f18197

    • SHA256

      8ae685b47e90fb495ad242cdb489839a21cee0e98291d5bafe8744c2e35cd802

    • SHA512

      8446e9ab3a062b67fa264fd933c8dee93ebf5c2a0497b8a3e2caf7c3dbf7701c1602a69f6e7d544757c7717ff5b9c0f08209b8c52a7d8287dcc7b5e6e266509d

    • SSDEEP

      3072:P7yxBqEgLpf7xEz5HCq+WYMSK5CGRJVJ6lKG9WrdWx9ks6NJfMWSm7myM/h3:OxBPgLZ7B54P5NRJVJ6RU0ks6XnSmay

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks