General

  • Target

    7d8a44cccc1d3d5ce6645104773198f8.exe

  • Size

    285KB

  • Sample

    221105-g4btjagdap

  • MD5

    7d8a44cccc1d3d5ce6645104773198f8

  • SHA1

    98e8472d8cdbf978215d02b1cfe0aaeefa23b12f

  • SHA256

    637c3d22d2c817015aaa6b1458d69dbbc0a75439f4afb99caf4b9c1948cec152

  • SHA512

    daead4668989f50068d622e8359f4927cdca763e79d11a018c560a5d7f2fd0079433b596f3af487c110c47397d14a4d3291179fbef6d056455c95141f3e6f9a7

  • SSDEEP

    3072:krqOg/IQgVp56o+ocKrl6TPWA9SHqblBh6gJrkhlLjQSZ9s65HQPZVG:Aq/wVmo+9KrUgHqLh9JrCfQ/61QfG

Malware Config

Targets

    • Target

      7d8a44cccc1d3d5ce6645104773198f8.exe

    • Size

      285KB

    • MD5

      7d8a44cccc1d3d5ce6645104773198f8

    • SHA1

      98e8472d8cdbf978215d02b1cfe0aaeefa23b12f

    • SHA256

      637c3d22d2c817015aaa6b1458d69dbbc0a75439f4afb99caf4b9c1948cec152

    • SHA512

      daead4668989f50068d622e8359f4927cdca763e79d11a018c560a5d7f2fd0079433b596f3af487c110c47397d14a4d3291179fbef6d056455c95141f3e6f9a7

    • SSDEEP

      3072:krqOg/IQgVp56o+ocKrl6TPWA9SHqblBh6gJrkhlLjQSZ9s65HQPZVG:Aq/wVmo+9KrUgHqLh9JrCfQ/61QfG

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks