General

  • Target

    116b612864fc76ce6cdb26d99eacc0597c09e09ebe102acc4bb2d0fdb087d3a6

  • Size

    186KB

  • Sample

    221123-sr5fvsfb8v

  • MD5

    036d40eefb90349f85693022de4ebc86

  • SHA1

    374412425c991d9f43735139b1f26877ce0ca455

  • SHA256

    116b612864fc76ce6cdb26d99eacc0597c09e09ebe102acc4bb2d0fdb087d3a6

  • SHA512

    1b57b8f8485994dbfe66ad7cd6ee7bcede9221f9cee75205d284aec8a236866f7704e170d6eddc870b4adece744531fcec227a4844dc07d75c5e5d96662429fc

  • SSDEEP

    3072:PuuR1LmfXLEjoWnck5Fwe0zQygV6kFDn+4XVxshRudBZ:2uCvLEjocVcQB6qiGguvZ

Malware Config

Targets

    • Target

      116b612864fc76ce6cdb26d99eacc0597c09e09ebe102acc4bb2d0fdb087d3a6

    • Size

      186KB

    • MD5

      036d40eefb90349f85693022de4ebc86

    • SHA1

      374412425c991d9f43735139b1f26877ce0ca455

    • SHA256

      116b612864fc76ce6cdb26d99eacc0597c09e09ebe102acc4bb2d0fdb087d3a6

    • SHA512

      1b57b8f8485994dbfe66ad7cd6ee7bcede9221f9cee75205d284aec8a236866f7704e170d6eddc870b4adece744531fcec227a4844dc07d75c5e5d96662429fc

    • SSDEEP

      3072:PuuR1LmfXLEjoWnck5Fwe0zQygV6kFDn+4XVxshRudBZ:2uCvLEjocVcQB6qiGguvZ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks