General

  • Target

    d130d75552c313118977946ca0ef93aa1428225f09d7f7bec717e30244aa3030

  • Size

    261KB

  • Sample

    221029-t3h8fafbep

  • MD5

    a463b18e3e36cb7af931bb0d8ae7a918

  • SHA1

    222739ec4c58b89b2732957e25f3987907f589d2

  • SHA256

    d130d75552c313118977946ca0ef93aa1428225f09d7f7bec717e30244aa3030

  • SHA512

    56418c38e88376ef806a279748c604abd1d88eb01129e09b3a4b32558f1509209d390b386a50877cdd133700d8a9da08d9c8b31cf09c3934cc81cd8fb45adee3

  • SSDEEP

    3072:9ZSfeBK9FHL+KMV8q5IdxpI37U4fDij1jbqcL6WjzyIfRzu1KXIC7/pM/h3s:ceB6dLFMgzI34JpjbxbSdKn/p

Malware Config

Targets

    • Target

      d130d75552c313118977946ca0ef93aa1428225f09d7f7bec717e30244aa3030

    • Size

      261KB

    • MD5

      a463b18e3e36cb7af931bb0d8ae7a918

    • SHA1

      222739ec4c58b89b2732957e25f3987907f589d2

    • SHA256

      d130d75552c313118977946ca0ef93aa1428225f09d7f7bec717e30244aa3030

    • SHA512

      56418c38e88376ef806a279748c604abd1d88eb01129e09b3a4b32558f1509209d390b386a50877cdd133700d8a9da08d9c8b31cf09c3934cc81cd8fb45adee3

    • SSDEEP

      3072:9ZSfeBK9FHL+KMV8q5IdxpI37U4fDij1jbqcL6WjzyIfRzu1KXIC7/pM/h3s:ceB6dLFMgzI34JpjbxbSdKn/p

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks