General

  • Target

    25fd8af32d760d9f05b69f3d5b95a96e59b0ce59ea988a33419f14f60d3c680b

  • Size

    284KB

  • Sample

    221030-bf5h2sfdbn

  • MD5

    b3002fe99c30ccf7e3b60b33a72700d0

  • SHA1

    277e46a85d0e5cf94e0b68d5a3026680b49fe711

  • SHA256

    25fd8af32d760d9f05b69f3d5b95a96e59b0ce59ea988a33419f14f60d3c680b

  • SHA512

    33f07188c1d571f8babd497328536694e1995421ffcec4255337b7e58f31954f6e8d45ddb4ffc05afc0d8349b1feb058b140136a3e4bdce47c5455ab1b2825b4

  • SSDEEP

    6144:GUevLLLlfYCx0oggMV8IvwSM4LZgBcA112:GUejBrVeV9v5Zaf1U

Malware Config

Targets

    • Target

      25fd8af32d760d9f05b69f3d5b95a96e59b0ce59ea988a33419f14f60d3c680b

    • Size

      284KB

    • MD5

      b3002fe99c30ccf7e3b60b33a72700d0

    • SHA1

      277e46a85d0e5cf94e0b68d5a3026680b49fe711

    • SHA256

      25fd8af32d760d9f05b69f3d5b95a96e59b0ce59ea988a33419f14f60d3c680b

    • SHA512

      33f07188c1d571f8babd497328536694e1995421ffcec4255337b7e58f31954f6e8d45ddb4ffc05afc0d8349b1feb058b140136a3e4bdce47c5455ab1b2825b4

    • SSDEEP

      6144:GUevLLLlfYCx0oggMV8IvwSM4LZgBcA112:GUejBrVeV9v5Zaf1U

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks