General

  • Target

    662347a8318b2871adf3b92c705ae41d670ad505e382f45637365c16ba16e1b3

  • Size

    187KB

  • Sample

    221123-fzx1jaff7x

  • MD5

    1f730d20295d6c7704d11ae900643737

  • SHA1

    8d2b9f9616ccf5fa077b4f3d61399770b2f8fa28

  • SHA256

    662347a8318b2871adf3b92c705ae41d670ad505e382f45637365c16ba16e1b3

  • SHA512

    0e2d70ffc72e55d13f68fff3b5ea02a9f21efd9708128210693cb50abd03fd005491a8f79ec1a227768b3fd8e266eca0d476e58b597729ed2891ac2b55e195f2

  • SSDEEP

    3072:WEKd7pB+nZ1ZLpXsW5Hj5fh7ALYRUNV+1RKk3lafMrrRCTOByt8:kdGLpXsaa0eoKk3lafcRuqyO

Malware Config

Targets

    • Target

      662347a8318b2871adf3b92c705ae41d670ad505e382f45637365c16ba16e1b3

    • Size

      187KB

    • MD5

      1f730d20295d6c7704d11ae900643737

    • SHA1

      8d2b9f9616ccf5fa077b4f3d61399770b2f8fa28

    • SHA256

      662347a8318b2871adf3b92c705ae41d670ad505e382f45637365c16ba16e1b3

    • SHA512

      0e2d70ffc72e55d13f68fff3b5ea02a9f21efd9708128210693cb50abd03fd005491a8f79ec1a227768b3fd8e266eca0d476e58b597729ed2891ac2b55e195f2

    • SSDEEP

      3072:WEKd7pB+nZ1ZLpXsW5Hj5fh7ALYRUNV+1RKk3lafMrrRCTOByt8:kdGLpXsaa0eoKk3lafcRuqyO

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks