General

  • Target

    90bc284259ec2b6d089bc9f7c8bec4b0221a3ed44c55a8396f4f711b2aac3d39

  • Size

    187KB

  • Sample

    221124-aasrmadg98

  • MD5

    143596842a81254e24678c07e5747ec5

  • SHA1

    8adebf8098130d5710ce6fc2e574634300fa6bba

  • SHA256

    90bc284259ec2b6d089bc9f7c8bec4b0221a3ed44c55a8396f4f711b2aac3d39

  • SHA512

    ba345a031c3fff6b1b182074d3287605f43ca50e39fda6c33d8e07b91ce0412d0faefbac5dcb0b27fd5c80bc65d3d423d49b49bc1b5ef560cc82534d8e5d872c

  • SSDEEP

    3072:zAyjdi23HtTLkLhDxBjHZGk56nh+Xq05zcDD8NJaBN4Z+:Tj3FkLhDxp5qnozGzCZ

Malware Config

Targets

    • Target

      90bc284259ec2b6d089bc9f7c8bec4b0221a3ed44c55a8396f4f711b2aac3d39

    • Size

      187KB

    • MD5

      143596842a81254e24678c07e5747ec5

    • SHA1

      8adebf8098130d5710ce6fc2e574634300fa6bba

    • SHA256

      90bc284259ec2b6d089bc9f7c8bec4b0221a3ed44c55a8396f4f711b2aac3d39

    • SHA512

      ba345a031c3fff6b1b182074d3287605f43ca50e39fda6c33d8e07b91ce0412d0faefbac5dcb0b27fd5c80bc65d3d423d49b49bc1b5ef560cc82534d8e5d872c

    • SSDEEP

      3072:zAyjdi23HtTLkLhDxBjHZGk56nh+Xq05zcDD8NJaBN4Z+:Tj3FkLhDxp5qnozGzCZ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks