General

  • Target

    203727092607bde99d5a5dfa6b87d8a16663edd78d506e5811b681ab32a645f9

  • Size

    350KB

  • Sample

    221203-n3vzcagf82

  • MD5

    3761f6a493de33d56501548d53b6ee66

  • SHA1

    56d6ffbd10243ba8c252a2b97791bec2a66faa78

  • SHA256

    203727092607bde99d5a5dfa6b87d8a16663edd78d506e5811b681ab32a645f9

  • SHA512

    8233771718cddf7adba46a40365bedb7bb1ff295af0041e85515f04f2a6fd3322ddc91d5df81c1076c0f341b5be1fa94d0902d79fab37f0890446d47e9521691

  • SSDEEP

    3072:4w8j1d40AAb2C5JRYsXy7+Mxv7x153kU6UHiOSt+aZBGnWNTC6NRMHnlXVUmzWHr:gj1C0AAaeRYey7GUC6hnMW2Rqn/ynYo

Malware Config

Targets

    • Target

      203727092607bde99d5a5dfa6b87d8a16663edd78d506e5811b681ab32a645f9

    • Size

      350KB

    • MD5

      3761f6a493de33d56501548d53b6ee66

    • SHA1

      56d6ffbd10243ba8c252a2b97791bec2a66faa78

    • SHA256

      203727092607bde99d5a5dfa6b87d8a16663edd78d506e5811b681ab32a645f9

    • SHA512

      8233771718cddf7adba46a40365bedb7bb1ff295af0041e85515f04f2a6fd3322ddc91d5df81c1076c0f341b5be1fa94d0902d79fab37f0890446d47e9521691

    • SSDEEP

      3072:4w8j1d40AAb2C5JRYsXy7+Mxv7x153kU6UHiOSt+aZBGnWNTC6NRMHnlXVUmzWHr:gj1C0AAaeRYey7GUC6hnMW2Rqn/ynYo

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks