General

  • Target

    82330de8d5059d6bb1266432184433b54b8b9f8f7ac93abbec48bbdf86eae30f

  • Size

    342KB

  • Sample

    221204-ptkyfshh27

  • MD5

    34021691355b2afc05dba7c42ee266ec

  • SHA1

    f9efd95dcd89b08234aabe5daebba867b5d2373c

  • SHA256

    82330de8d5059d6bb1266432184433b54b8b9f8f7ac93abbec48bbdf86eae30f

  • SHA512

    8490f4be7014af3ebf0cd224aaf2644a5e3cf821a3e65b91ea34b946515f310efff1aed21f834099a79f57a82a847ff01928e42928e98d6ba75f9e7483428fae

  • SSDEEP

    3072:81ifwan+i7AMe55opOuLsudcPKMPDtCWJO269HUymlAjTI+TjIhR4SH6G11dRKiM:MiB+iRWQNGPKMPDtc3UymlglIh6G1PZ

Malware Config

Targets

    • Target

      82330de8d5059d6bb1266432184433b54b8b9f8f7ac93abbec48bbdf86eae30f

    • Size

      342KB

    • MD5

      34021691355b2afc05dba7c42ee266ec

    • SHA1

      f9efd95dcd89b08234aabe5daebba867b5d2373c

    • SHA256

      82330de8d5059d6bb1266432184433b54b8b9f8f7ac93abbec48bbdf86eae30f

    • SHA512

      8490f4be7014af3ebf0cd224aaf2644a5e3cf821a3e65b91ea34b946515f310efff1aed21f834099a79f57a82a847ff01928e42928e98d6ba75f9e7483428fae

    • SSDEEP

      3072:81ifwan+i7AMe55opOuLsudcPKMPDtCWJO269HUymlAjTI+TjIhR4SH6G11dRKiM:MiB+iRWQNGPKMPDtc3UymlglIh6G1PZ

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks