General

  • Target

    e50c0687d58b84c0093bac828a6f90d4deba19c20a7231cfa6a8d704127b8b52

  • Size

    351KB

  • Sample

    221203-r3jg4ahg73

  • MD5

    404306f6d8ac5572f8892b7b5fce4973

  • SHA1

    0754c7dc1dd413cd459fb6bc789191332f92fbab

  • SHA256

    e50c0687d58b84c0093bac828a6f90d4deba19c20a7231cfa6a8d704127b8b52

  • SHA512

    7c8a084f82db90a18a1fa99ae451f21aa418e7f1dc53351d2d600c1f37df7a24095d0911969f5f6d316703d952288c6978927fa723895e36907b6e93a798833e

  • SSDEEP

    3072:T1R8X4gUPAm2lg5JvUKo/M+WzEDgnx9gBcbgipJdtTUZQJKGnWNTC6NRMHnlXv9Q:EX4LPATKvUTDgrFBznMW2RqnVEY

Malware Config

Targets

    • Target

      e50c0687d58b84c0093bac828a6f90d4deba19c20a7231cfa6a8d704127b8b52

    • Size

      351KB

    • MD5

      404306f6d8ac5572f8892b7b5fce4973

    • SHA1

      0754c7dc1dd413cd459fb6bc789191332f92fbab

    • SHA256

      e50c0687d58b84c0093bac828a6f90d4deba19c20a7231cfa6a8d704127b8b52

    • SHA512

      7c8a084f82db90a18a1fa99ae451f21aa418e7f1dc53351d2d600c1f37df7a24095d0911969f5f6d316703d952288c6978927fa723895e36907b6e93a798833e

    • SSDEEP

      3072:T1R8X4gUPAm2lg5JvUKo/M+WzEDgnx9gBcbgipJdtTUZQJKGnWNTC6NRMHnlXv9Q:EX4LPATKvUTDgrFBznMW2RqnVEY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks