General

  • Target

    4fca926056d878dfa9f932dabb0399ba2903be552857cf87cca71ae8b322e503

  • Size

    185KB

  • Sample

    221201-s94maagh3w

  • MD5

    1a7d4c22434c7ff77afa45d4833924c5

  • SHA1

    34b03b743a2a355a645fb0d5773302a4ca51a43e

  • SHA256

    4fca926056d878dfa9f932dabb0399ba2903be552857cf87cca71ae8b322e503

  • SHA512

    cc167b84d2fe141c4184766cea79a56057954de1a70258060a39b4a3bb2236a1cbb9dfbe189b6708f5a302cc26fb89d53488159569e7660808870a941dfd5411

  • SSDEEP

    3072:5z4wkDsTQirRcyg5C54oUSAqrMvT4HdKPasYmFVtyMlDAbEa6mKhgU:4irRcygemqrC48/FHyMiEa5KSU

Malware Config

Targets

    • Target

      4fca926056d878dfa9f932dabb0399ba2903be552857cf87cca71ae8b322e503

    • Size

      185KB

    • MD5

      1a7d4c22434c7ff77afa45d4833924c5

    • SHA1

      34b03b743a2a355a645fb0d5773302a4ca51a43e

    • SHA256

      4fca926056d878dfa9f932dabb0399ba2903be552857cf87cca71ae8b322e503

    • SHA512

      cc167b84d2fe141c4184766cea79a56057954de1a70258060a39b4a3bb2236a1cbb9dfbe189b6708f5a302cc26fb89d53488159569e7660808870a941dfd5411

    • SSDEEP

      3072:5z4wkDsTQirRcyg5C54oUSAqrMvT4HdKPasYmFVtyMlDAbEa6mKhgU:4irRcygemqrC48/FHyMiEa5KSU

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks