General

  • Target

    370f6355395c92b6748c108cfc2c6194361ea8f1f0204eebdbc5219e78732892

  • Size

    285KB

  • Sample

    221105-y57q2ahec8

  • MD5

    fed44db77e163798457d1e7365b5b1cc

  • SHA1

    535372f8021b6e7a110873d5186d955ec940f2e1

  • SHA256

    370f6355395c92b6748c108cfc2c6194361ea8f1f0204eebdbc5219e78732892

  • SHA512

    b1b21bc36b8dc560b37152e7cf7e263a19ffc232bb6b99caf8605af38b61a657c29cf60b478a190a9752c0dfffe00116c085aa61fcb93e6781710bcc24a1f53f

  • SSDEEP

    3072:gnUq+2vAgBt5N4yCzQssYM+1gkWLAkJvWVSAyrnAyclqIluiAE:QUq3Bt4ysL1IskJeV2rnAyMqIlui

Malware Config

Targets

    • Target

      370f6355395c92b6748c108cfc2c6194361ea8f1f0204eebdbc5219e78732892

    • Size

      285KB

    • MD5

      fed44db77e163798457d1e7365b5b1cc

    • SHA1

      535372f8021b6e7a110873d5186d955ec940f2e1

    • SHA256

      370f6355395c92b6748c108cfc2c6194361ea8f1f0204eebdbc5219e78732892

    • SHA512

      b1b21bc36b8dc560b37152e7cf7e263a19ffc232bb6b99caf8605af38b61a657c29cf60b478a190a9752c0dfffe00116c085aa61fcb93e6781710bcc24a1f53f

    • SSDEEP

      3072:gnUq+2vAgBt5N4yCzQssYM+1gkWLAkJvWVSAyrnAyclqIluiAE:QUq3Bt4ysL1IskJeV2rnAyMqIlui

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks