General

  • Target

    66e0f555ac4c2f204b9ef7c3c80fb3e8c19880b1c44caa74a9ce1be7fd4545ed

  • Size

    349KB

  • Sample

    221202-wwyewsbd43

  • MD5

    7ac8acf1bfef24d4c4bccfb291cf3e64

  • SHA1

    5af3299e8ab529debb125bc8eb0ac3a528e49c06

  • SHA256

    66e0f555ac4c2f204b9ef7c3c80fb3e8c19880b1c44caa74a9ce1be7fd4545ed

  • SHA512

    d0c1f7758151d7809c04caa3705f2b87600abebf0d5d9d6fb1bd785ac829c8ede4f2462ae9236c152ef491da0f06ba7e97ac776a50bcfbd22b63f32c9e888057

  • SSDEEP

    6144:BMkI8LNAuDspPBNqoy0lQMAN63SoPZ4RU94ZuRjMgU:B7nFDsLu1eS6dRQg

Malware Config

Targets

    • Target

      66e0f555ac4c2f204b9ef7c3c80fb3e8c19880b1c44caa74a9ce1be7fd4545ed

    • Size

      349KB

    • MD5

      7ac8acf1bfef24d4c4bccfb291cf3e64

    • SHA1

      5af3299e8ab529debb125bc8eb0ac3a528e49c06

    • SHA256

      66e0f555ac4c2f204b9ef7c3c80fb3e8c19880b1c44caa74a9ce1be7fd4545ed

    • SHA512

      d0c1f7758151d7809c04caa3705f2b87600abebf0d5d9d6fb1bd785ac829c8ede4f2462ae9236c152ef491da0f06ba7e97ac776a50bcfbd22b63f32c9e888057

    • SSDEEP

      6144:BMkI8LNAuDspPBNqoy0lQMAN63SoPZ4RU94ZuRjMgU:B7nFDsLu1eS6dRQg

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks