General

  • Target

    c8a3a0df1fee26f22ac53db3bdd83cb33acacf3b2c63bd3cc5720ba73451624e

  • Size

    260KB

  • Sample

    221205-qfjznscg55

  • MD5

    9cf00537227406a8b3e3f5c72ab29ef0

  • SHA1

    e96ffe33de89bb39ef3b6062c4d5c7d6cdb90c51

  • SHA256

    c8a3a0df1fee26f22ac53db3bdd83cb33acacf3b2c63bd3cc5720ba73451624e

  • SHA512

    55f131a52755c963a5cb0fcd3fd64dcc93980fc0e53d3e33acc01dce283399f7e85b2d212d56858d125be7c10cb8f59f140785bc3688123de82aa02967743a97

  • SSDEEP

    6144:4eUQr3bH7ejSMIbrS7EeVYUk02s2ptvzkXe2U:4HQKO5IEeVY3PZpTd

Malware Config

Targets

    • Target

      c8a3a0df1fee26f22ac53db3bdd83cb33acacf3b2c63bd3cc5720ba73451624e

    • Size

      260KB

    • MD5

      9cf00537227406a8b3e3f5c72ab29ef0

    • SHA1

      e96ffe33de89bb39ef3b6062c4d5c7d6cdb90c51

    • SHA256

      c8a3a0df1fee26f22ac53db3bdd83cb33acacf3b2c63bd3cc5720ba73451624e

    • SHA512

      55f131a52755c963a5cb0fcd3fd64dcc93980fc0e53d3e33acc01dce283399f7e85b2d212d56858d125be7c10cb8f59f140785bc3688123de82aa02967743a97

    • SSDEEP

      6144:4eUQr3bH7ejSMIbrS7EeVYUk02s2ptvzkXe2U:4HQKO5IEeVY3PZpTd

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks