General

  • Target

    2497e9563bf5c57265ac21255ff85718c4d166ef03f7b733ebbd07ad8d8caa38

  • Size

    186KB

  • Sample

    221123-f3k55scc36

  • MD5

    bb90bb54210be40bc4527833f6176cd7

  • SHA1

    64cc979a41e065ada456246bf8aff2d547ee5780

  • SHA256

    2497e9563bf5c57265ac21255ff85718c4d166ef03f7b733ebbd07ad8d8caa38

  • SHA512

    92b8645f422cc22b2b3f1be589611bdc490163564192bbd4604512c209b35a2ffa839034f85233d1fc89185303ec8114b795bc7ef88525d295ebe50cb53977bf

  • SSDEEP

    3072:YEKdQ3DlGiL3Fd0ZWJ323j5Y14TPi8Th2qORIgi/IkDKStPwlXjtLMuaF:GdUL3sZaR8NqhRlXjtLc

Malware Config

Targets

    • Target

      2497e9563bf5c57265ac21255ff85718c4d166ef03f7b733ebbd07ad8d8caa38

    • Size

      186KB

    • MD5

      bb90bb54210be40bc4527833f6176cd7

    • SHA1

      64cc979a41e065ada456246bf8aff2d547ee5780

    • SHA256

      2497e9563bf5c57265ac21255ff85718c4d166ef03f7b733ebbd07ad8d8caa38

    • SHA512

      92b8645f422cc22b2b3f1be589611bdc490163564192bbd4604512c209b35a2ffa839034f85233d1fc89185303ec8114b795bc7ef88525d295ebe50cb53977bf

    • SSDEEP

      3072:YEKdQ3DlGiL3Fd0ZWJ323j5Y14TPi8Th2qORIgi/IkDKStPwlXjtLMuaF:GdUL3sZaR8NqhRlXjtLc

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks