General

  • Target

    dbdf7af1f93cb6a18f117612b52b14095737a3eb3b09126400ddf3675bf8f8df

  • Size

    350KB

  • Sample

    221203-np8y2sfe44

  • MD5

    3aff40344d883258cb2dd55df0e2878a

  • SHA1

    94b32008eb2e1856494c06963fc7d7522e7d985c

  • SHA256

    dbdf7af1f93cb6a18f117612b52b14095737a3eb3b09126400ddf3675bf8f8df

  • SHA512

    e0290a5b5ca3dc0f459c5f86b25cd4d0f71e759056498360c481ca75a9c7137ea238b6eb2eb630ba73dc9e37b0c96bba3cb5ae0c6cbc1300b590596343fc9f11

  • SSDEEP

    6144:ebR55ZAGeWgKziZZULPW7YXiGLD9NxwBnMW2RqnCT4aPncdoRo9Yo:eblZAGbtziobYYlDbEMW3Mfi3Yo

Malware Config

Targets

    • Target

      dbdf7af1f93cb6a18f117612b52b14095737a3eb3b09126400ddf3675bf8f8df

    • Size

      350KB

    • MD5

      3aff40344d883258cb2dd55df0e2878a

    • SHA1

      94b32008eb2e1856494c06963fc7d7522e7d985c

    • SHA256

      dbdf7af1f93cb6a18f117612b52b14095737a3eb3b09126400ddf3675bf8f8df

    • SHA512

      e0290a5b5ca3dc0f459c5f86b25cd4d0f71e759056498360c481ca75a9c7137ea238b6eb2eb630ba73dc9e37b0c96bba3cb5ae0c6cbc1300b590596343fc9f11

    • SSDEEP

      6144:ebR55ZAGeWgKziZZULPW7YXiGLD9NxwBnMW2RqnCT4aPncdoRo9Yo:eblZAGbtziobYYlDbEMW3Mfi3Yo

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks