General

  • Target

    27263abe7e3f92c3b09c2dadaf0006c81d2eef1fee87db1877c07d793b1dfcfa

  • Size

    210KB

  • Sample

    221101-e7gg3shadp

  • MD5

    10a6dd61e59531de3471ad479eff1e89

  • SHA1

    08b5c8870520a3783b31bc9e5002d3a8e4cd01c5

  • SHA256

    27263abe7e3f92c3b09c2dadaf0006c81d2eef1fee87db1877c07d793b1dfcfa

  • SHA512

    ec464be8d9791718965cbffbaeba19cca0884d3bde899138482763e44cff0f54c2e07c196b9e87ec0c65702136b2c5a5c22859c8e5397ebfaacd150b52b57045

  • SSDEEP

    3072:T6Iueg6T8uiy/ZfLlhn6b5/56ii84lWU20uIJMxd+4OA1BH+GQOwN3px:T6P2TTiy/FLznNiiB39Ma4F1VQl3p

Malware Config

Targets

    • Target

      27263abe7e3f92c3b09c2dadaf0006c81d2eef1fee87db1877c07d793b1dfcfa

    • Size

      210KB

    • MD5

      10a6dd61e59531de3471ad479eff1e89

    • SHA1

      08b5c8870520a3783b31bc9e5002d3a8e4cd01c5

    • SHA256

      27263abe7e3f92c3b09c2dadaf0006c81d2eef1fee87db1877c07d793b1dfcfa

    • SHA512

      ec464be8d9791718965cbffbaeba19cca0884d3bde899138482763e44cff0f54c2e07c196b9e87ec0c65702136b2c5a5c22859c8e5397ebfaacd150b52b57045

    • SSDEEP

      3072:T6Iueg6T8uiy/ZfLlhn6b5/56ii84lWU20uIJMxd+4OA1BH+GQOwN3px:T6P2TTiy/FLznNiiB39Ma4F1VQl3p

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks