General

  • Target

    28c51f0f8f8af01ff6a4770ddb0244873df333c2d80b8ff04e2498c1b14e3c55

  • Size

    186KB

  • Sample

    221123-h441raeh65

  • MD5

    1785ee909fad4fc8238d66805029f42d

  • SHA1

    6f06df6cdeccbe6bb25938d7254f11e5449aef00

  • SHA256

    28c51f0f8f8af01ff6a4770ddb0244873df333c2d80b8ff04e2498c1b14e3c55

  • SHA512

    bff2a207ab26ceb096f79935969cfc6aec830cfca9bd2a6f85430efedce7e1fb63f10baeeb18eb8f1a4b830370b4c37e3ac497593df98ff65d95ef1f88521e92

  • SSDEEP

    3072:WBkADqu9RpLGO/0WWwjD5d4/DlQbM1PJCGSAc3PZ8zOh847:5A2QLX/0WXFb2PJ/1cPZLhZ

Malware Config

Targets

    • Target

      28c51f0f8f8af01ff6a4770ddb0244873df333c2d80b8ff04e2498c1b14e3c55

    • Size

      186KB

    • MD5

      1785ee909fad4fc8238d66805029f42d

    • SHA1

      6f06df6cdeccbe6bb25938d7254f11e5449aef00

    • SHA256

      28c51f0f8f8af01ff6a4770ddb0244873df333c2d80b8ff04e2498c1b14e3c55

    • SHA512

      bff2a207ab26ceb096f79935969cfc6aec830cfca9bd2a6f85430efedce7e1fb63f10baeeb18eb8f1a4b830370b4c37e3ac497593df98ff65d95ef1f88521e92

    • SSDEEP

      3072:WBkADqu9RpLGO/0WWwjD5d4/DlQbM1PJCGSAc3PZ8zOh847:5A2QLX/0WXFb2PJ/1cPZLhZ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks