General

  • Target

    160231653207d7dbd300d37456f87dedfdb40acfe68925fd94119bb420f7adc4

  • Size

    211KB

  • Sample

    221103-l68y9sbdck

  • MD5

    2e10f4ccb1268963188ceb1355747c69

  • SHA1

    80b15e02d7240a2608fdb5abb11688bcad71d230

  • SHA256

    160231653207d7dbd300d37456f87dedfdb40acfe68925fd94119bb420f7adc4

  • SHA512

    b519fd103bc5cd20149b2a9bc3eac3db2fb6c01a60150052516e8c12e6b2c4320647a0d64282f728dbc60768896ababe4d1737a83089b6ecd4970484eb8a8d63

  • SSDEEP

    3072:lbhu9wqVfFuSqLtp56Cf5XRgAIzauGxlB19kQEfiE6EmYhafQex:lbIFV9udL75vRNIerzB19dEaE6khTe

Malware Config

Targets

    • Target

      160231653207d7dbd300d37456f87dedfdb40acfe68925fd94119bb420f7adc4

    • Size

      211KB

    • MD5

      2e10f4ccb1268963188ceb1355747c69

    • SHA1

      80b15e02d7240a2608fdb5abb11688bcad71d230

    • SHA256

      160231653207d7dbd300d37456f87dedfdb40acfe68925fd94119bb420f7adc4

    • SHA512

      b519fd103bc5cd20149b2a9bc3eac3db2fb6c01a60150052516e8c12e6b2c4320647a0d64282f728dbc60768896ababe4d1737a83089b6ecd4970484eb8a8d63

    • SSDEEP

      3072:lbhu9wqVfFuSqLtp56Cf5XRgAIzauGxlB19kQEfiE6EmYhafQex:lbIFV9udL75vRNIerzB19dEaE6khTe

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks