General

  • Target

    26bd0e38184248619ed1172b93c0bc698045e498ce5f33fbf5e46a1441586f8b

  • Size

    185KB

  • Sample

    221123-qp2wvahe51

  • MD5

    406cc15decb947f74175003e07b63a9d

  • SHA1

    fc35bd5543ebcf62a287b4a7b048136b2fa8f1fb

  • SHA256

    26bd0e38184248619ed1172b93c0bc698045e498ce5f33fbf5e46a1441586f8b

  • SHA512

    2d80b99ee68b0ac86372888e2be77aa9eb9638e9ba03f294cd98b0fca5dba16ba88c80ec11ba9ca5a0bb6dc313048cdfec8a62429aabacfdee2e5ebc2a580e1e

  • SSDEEP

    3072:HG0o1aQYNi0LxhyWtss53gksRv5ZEuSnhWyxv6pl8IIyxPghsM:m0RLxhy+lgRP4hWsv6pl8IIyW

Malware Config

Targets

    • Target

      26bd0e38184248619ed1172b93c0bc698045e498ce5f33fbf5e46a1441586f8b

    • Size

      185KB

    • MD5

      406cc15decb947f74175003e07b63a9d

    • SHA1

      fc35bd5543ebcf62a287b4a7b048136b2fa8f1fb

    • SHA256

      26bd0e38184248619ed1172b93c0bc698045e498ce5f33fbf5e46a1441586f8b

    • SHA512

      2d80b99ee68b0ac86372888e2be77aa9eb9638e9ba03f294cd98b0fca5dba16ba88c80ec11ba9ca5a0bb6dc313048cdfec8a62429aabacfdee2e5ebc2a580e1e

    • SSDEEP

      3072:HG0o1aQYNi0LxhyWtss53gksRv5ZEuSnhWyxv6pl8IIyxPghsM:m0RLxhy+lgRP4hWsv6pl8IIyW

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks