General

  • Target

    70f4f11fc415e8e03eaec074fd3d5abfd8d8c66c774ace2d567b2c0c5ba09625

  • Size

    210KB

  • Sample

    221103-ztbpwshcbn

  • MD5

    0b723edd8548107a02c2d8618195a726

  • SHA1

    52ffd5ad32dae843c524d01c313d25083da83d0d

  • SHA256

    70f4f11fc415e8e03eaec074fd3d5abfd8d8c66c774ace2d567b2c0c5ba09625

  • SHA512

    5799be1297c8062e0f9a73969e2715c3478241ed9eff9adf7b4ddff87df1095df33404c60f2d418995de12f03d04db8acc753b107d42d1911cfb2638665c5d57

  • SSDEEP

    3072:uLVa751Dnip+fULycww06fcJ5+3sEZkneArjR1ljuQVf/52FEoMx:uLcTLipPLBww048EZkpTuQ9zoM

Malware Config

Targets

    • Target

      70f4f11fc415e8e03eaec074fd3d5abfd8d8c66c774ace2d567b2c0c5ba09625

    • Size

      210KB

    • MD5

      0b723edd8548107a02c2d8618195a726

    • SHA1

      52ffd5ad32dae843c524d01c313d25083da83d0d

    • SHA256

      70f4f11fc415e8e03eaec074fd3d5abfd8d8c66c774ace2d567b2c0c5ba09625

    • SHA512

      5799be1297c8062e0f9a73969e2715c3478241ed9eff9adf7b4ddff87df1095df33404c60f2d418995de12f03d04db8acc753b107d42d1911cfb2638665c5d57

    • SSDEEP

      3072:uLVa751Dnip+fULycww06fcJ5+3sEZkneArjR1ljuQVf/52FEoMx:uLcTLipPLBww048EZkpTuQ9zoM

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks