General

  • Target

    08532dde5bbd2fb75620d03c7962db84822dbef0db99a3b9bd1f00e70a3a7429

  • Size

    309KB

  • Sample

    221106-21hg5afae8

  • MD5

    ad1627dad8b938aaf6ef9f80a222e313

  • SHA1

    e35464951ba59d9f75786becd9b100f5ba6f599c

  • SHA256

    08532dde5bbd2fb75620d03c7962db84822dbef0db99a3b9bd1f00e70a3a7429

  • SHA512

    05e4b1570d8d0e06ff313742bd146827eec22f5f212626082d77224a146ab2286846db697fdf910c9772fb0559c7e291257ebfd65421741ac5a3f18ce0f02950

  • SSDEEP

    3072:4eiuSlnem7Zo57RDAyNj/BZWhd32UzXJ0BerdxHgzAKCMgrDuK8J/B8E4:UPlnJaRNNjahd32w0B4xDxMgryH54

Malware Config

Targets

    • Target

      08532dde5bbd2fb75620d03c7962db84822dbef0db99a3b9bd1f00e70a3a7429

    • Size

      309KB

    • MD5

      ad1627dad8b938aaf6ef9f80a222e313

    • SHA1

      e35464951ba59d9f75786becd9b100f5ba6f599c

    • SHA256

      08532dde5bbd2fb75620d03c7962db84822dbef0db99a3b9bd1f00e70a3a7429

    • SHA512

      05e4b1570d8d0e06ff313742bd146827eec22f5f212626082d77224a146ab2286846db697fdf910c9772fb0559c7e291257ebfd65421741ac5a3f18ce0f02950

    • SSDEEP

      3072:4eiuSlnem7Zo57RDAyNj/BZWhd32UzXJ0BerdxHgzAKCMgrDuK8J/B8E4:UPlnJaRNNjahd32w0B4xDxMgryH54

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks