General

  • Target

    d27c0d8205ce621fbb8939a13d8549af14d33b602da0c1dfabe7f6b3b0372280

  • Size

    146KB

  • Sample

    221129-q3bxksgg5z

  • MD5

    f2030abcdab0b5219a570ef1c58194b7

  • SHA1

    6f62a0f269fafa734a2528f84f9d8810d3d63eae

  • SHA256

    d27c0d8205ce621fbb8939a13d8549af14d33b602da0c1dfabe7f6b3b0372280

  • SHA512

    7ffadbad1a50d593d733c5c1cf0102d726000a575d798e0cff838a8893980cc8afbe769923e57e7b6bb36e34fceef64c7a5aa5a638ba257897bb11a0a7fa7e4d

  • SSDEEP

    1536:IVpLTRRKFBN/0OIGJGGCmfEBgiZN53M7CoaYoykpIkX18Tc0zUF+64Qu1siq7O3i:g/Rx4HEZN5cyDpIsiUY/1o7O3ssc3Lb

Malware Config

Targets

    • Target

      d27c0d8205ce621fbb8939a13d8549af14d33b602da0c1dfabe7f6b3b0372280

    • Size

      146KB

    • MD5

      f2030abcdab0b5219a570ef1c58194b7

    • SHA1

      6f62a0f269fafa734a2528f84f9d8810d3d63eae

    • SHA256

      d27c0d8205ce621fbb8939a13d8549af14d33b602da0c1dfabe7f6b3b0372280

    • SHA512

      7ffadbad1a50d593d733c5c1cf0102d726000a575d798e0cff838a8893980cc8afbe769923e57e7b6bb36e34fceef64c7a5aa5a638ba257897bb11a0a7fa7e4d

    • SSDEEP

      1536:IVpLTRRKFBN/0OIGJGGCmfEBgiZN53M7CoaYoykpIkX18Tc0zUF+64Qu1siq7O3i:g/Rx4HEZN5cyDpIsiUY/1o7O3ssc3Lb

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks