General

  • Target

    d66af1357430750ed2c60b4956ae01e3e2003cb09d931c75dba1951867727958

  • Size

    185KB

  • Sample

    221123-pfjs8sed3x

  • MD5

    2060ebdf8e22efe7caa864eb3cda76b2

  • SHA1

    cc77e82b0e183e59f6314f4c307be3fbbcac2725

  • SHA256

    d66af1357430750ed2c60b4956ae01e3e2003cb09d931c75dba1951867727958

  • SHA512

    9b72b90dc5a3a630d2fbff3bd2a746c301ee71a35708e43d87d816d73baf842a29afd24978e2e4e5c178a34f2f741827dead00fc9322f70303058ba262f07d1e

  • SSDEEP

    3072:NqloP1M1LObXCWC6O5QlJqgQaTaxTjPBAI5bEqDc866lzSoW:Ml5LObXClWlJJQIaxvPBD5oZ

Malware Config

Targets

    • Target

      d66af1357430750ed2c60b4956ae01e3e2003cb09d931c75dba1951867727958

    • Size

      185KB

    • MD5

      2060ebdf8e22efe7caa864eb3cda76b2

    • SHA1

      cc77e82b0e183e59f6314f4c307be3fbbcac2725

    • SHA256

      d66af1357430750ed2c60b4956ae01e3e2003cb09d931c75dba1951867727958

    • SHA512

      9b72b90dc5a3a630d2fbff3bd2a746c301ee71a35708e43d87d816d73baf842a29afd24978e2e4e5c178a34f2f741827dead00fc9322f70303058ba262f07d1e

    • SSDEEP

      3072:NqloP1M1LObXCWC6O5QlJqgQaTaxTjPBAI5bEqDc866lzSoW:Ml5LObXClWlJJQIaxvPBD5oZ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks