General

  • Target

    78bfa00f3cc36be5915d9badc9ba31342dc211b08301d21ba13f2598d4ed23e5

  • Size

    191KB

  • Sample

    221201-t3xe3agb52

  • MD5

    44ce41f52362b355485f0c243de233e5

  • SHA1

    83fd161b3a6287b9d0cdad4e23f0355954e4365d

  • SHA256

    78bfa00f3cc36be5915d9badc9ba31342dc211b08301d21ba13f2598d4ed23e5

  • SHA512

    749de69947d971d31e24923a6b8ab2b40f2cc0badba91676db37c20497e792d92d63ce872b11d08182b57defb4e7a299c1c055aa1148ad160c3c57c198389198

  • SSDEEP

    3072:2kh7q8vK0I2Bp5bGBRwTBjrbT8wvECEVU27wIjCDAbEaWSPus:rK0I2BnqROvHEL0ITEaWSPu

Malware Config

Targets

    • Target

      78bfa00f3cc36be5915d9badc9ba31342dc211b08301d21ba13f2598d4ed23e5

    • Size

      191KB

    • MD5

      44ce41f52362b355485f0c243de233e5

    • SHA1

      83fd161b3a6287b9d0cdad4e23f0355954e4365d

    • SHA256

      78bfa00f3cc36be5915d9badc9ba31342dc211b08301d21ba13f2598d4ed23e5

    • SHA512

      749de69947d971d31e24923a6b8ab2b40f2cc0badba91676db37c20497e792d92d63ce872b11d08182b57defb4e7a299c1c055aa1148ad160c3c57c198389198

    • SSDEEP

      3072:2kh7q8vK0I2Bp5bGBRwTBjrbT8wvECEVU27wIjCDAbEaWSPus:rK0I2BnqROvHEL0ITEaWSPu

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks