General

  • Target

    a6f357c82ed533049af64004ef96395e6c8e0fe9e2bba184aaa583fa58f77e03

  • Size

    186KB

  • Sample

    221123-ppcraafa5v

  • MD5

    3e6e45622575b94fa127a2fd6398d568

  • SHA1

    9c1d9eaae2f730dcfa2b7f54d62a9bf052ec15b7

  • SHA256

    a6f357c82ed533049af64004ef96395e6c8e0fe9e2bba184aaa583fa58f77e03

  • SHA512

    f70fdc52f9a9a900b4a65c93c3ba2eb51839314beb107d27c35134439c9c34b70b586d18ede5623a8d8df39c661218e2def987030c5a40a4a9098f5dd5f280f8

  • SSDEEP

    3072:NDuvcwGaRLxd2zWXmO57Xj+JeEi2UZLZXZ2S455F:BuBLxd2z4ZXqoE76FZ2SQ

Malware Config

Targets

    • Target

      a6f357c82ed533049af64004ef96395e6c8e0fe9e2bba184aaa583fa58f77e03

    • Size

      186KB

    • MD5

      3e6e45622575b94fa127a2fd6398d568

    • SHA1

      9c1d9eaae2f730dcfa2b7f54d62a9bf052ec15b7

    • SHA256

      a6f357c82ed533049af64004ef96395e6c8e0fe9e2bba184aaa583fa58f77e03

    • SHA512

      f70fdc52f9a9a900b4a65c93c3ba2eb51839314beb107d27c35134439c9c34b70b586d18ede5623a8d8df39c661218e2def987030c5a40a4a9098f5dd5f280f8

    • SSDEEP

      3072:NDuvcwGaRLxd2zWXmO57Xj+JeEi2UZLZXZ2S455F:BuBLxd2z4ZXqoE76FZ2SQ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks