General

  • Target

    3f7d3200b48d9eea89d452d2f2465d667b6c75c3c844dd62ecf8813e54b41837

  • Size

    286KB

  • Sample

    221030-kfzggabdc2

  • MD5

    ce975cc3ee003d3335e397709b6226cc

  • SHA1

    002b944b28a320e89188f6076696fefc8191a432

  • SHA256

    3f7d3200b48d9eea89d452d2f2465d667b6c75c3c844dd62ecf8813e54b41837

  • SHA512

    b86c7b5390ba22d221c163abe4d623f87e6cd7a149f443b96fee46414e537596a0c6b3909c719fbfd964ec92fd40edbff759ff9fde080a36db1a70016b9e4531

  • SSDEEP

    3072:z8ZiVUFvILqlksba5wFEgKaXEQ7SJHba0sFd1VPAppcW8FR2CdceM/h3:XUFvILqlksbtEQ+mnbPAcnR92e

Malware Config

Targets

    • Target

      3f7d3200b48d9eea89d452d2f2465d667b6c75c3c844dd62ecf8813e54b41837

    • Size

      286KB

    • MD5

      ce975cc3ee003d3335e397709b6226cc

    • SHA1

      002b944b28a320e89188f6076696fefc8191a432

    • SHA256

      3f7d3200b48d9eea89d452d2f2465d667b6c75c3c844dd62ecf8813e54b41837

    • SHA512

      b86c7b5390ba22d221c163abe4d623f87e6cd7a149f443b96fee46414e537596a0c6b3909c719fbfd964ec92fd40edbff759ff9fde080a36db1a70016b9e4531

    • SSDEEP

      3072:z8ZiVUFvILqlksba5wFEgKaXEQ7SJHba0sFd1VPAppcW8FR2CdceM/h3:XUFvILqlksbtEQ+mnbPAcnR92e

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks