General

  • Target

    7eb649cdee4087ef2128dc2a54c91c414acd1d33b791dae8856bb08335706c49

  • Size

    211KB

  • Sample

    221031-zkb93adgej

  • MD5

    4ae3997b588738ff3bbcfecf998b8820

  • SHA1

    33f35b43b59485cac675aca148466b44687213e7

  • SHA256

    7eb649cdee4087ef2128dc2a54c91c414acd1d33b791dae8856bb08335706c49

  • SHA512

    bb6af42bae00752fd922ce151b71f4e7257bc244b935094359209e4e32c00e60cab9c8677fb57001e4d3d5396003297c262708c5b612d60b6770d6a0762b559e

  • SSDEEP

    3072:viDEFu65SciqgplLDjG6+f5Vec7c7Waa8i/EOZLta+JprVUx:viIn5HiqgrLDjGY/7WzEotaSi

Malware Config

Targets

    • Target

      7eb649cdee4087ef2128dc2a54c91c414acd1d33b791dae8856bb08335706c49

    • Size

      211KB

    • MD5

      4ae3997b588738ff3bbcfecf998b8820

    • SHA1

      33f35b43b59485cac675aca148466b44687213e7

    • SHA256

      7eb649cdee4087ef2128dc2a54c91c414acd1d33b791dae8856bb08335706c49

    • SHA512

      bb6af42bae00752fd922ce151b71f4e7257bc244b935094359209e4e32c00e60cab9c8677fb57001e4d3d5396003297c262708c5b612d60b6770d6a0762b559e

    • SSDEEP

      3072:viDEFu65SciqgplLDjG6+f5Vec7c7Waa8i/EOZLta+JprVUx:viIn5HiqgrLDjGY/7WzEotaSi

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks