General

  • Target

    9e0ec049617b681301bd6c970c461133e08cb0c0f4bb4be1241dc8ba6de43642

  • Size

    176KB

  • Sample

    221206-yny3kahb76

  • MD5

    a0649376bd22babe8453000508bb4e2f

  • SHA1

    43dc9953e2741e4cb710d6f6d279c3ee727b5442

  • SHA256

    37ddbe024cada3eeb16c90ce5c72bcf46a060fd12dc8c486fbcb7c755709f072

  • SHA512

    70d18d55454091e9e89e5c5df93dfc00ecf8081bab209838135dd9b1397596e3b81075aa412464fd17df46eafdf9870ec7a0acbaafd144b2baef3ca28a5afd60

  • SSDEEP

    3072:caFz6Oo/23ln2KuqU4PmH37SV8E9QJ3Z/DuXUP0p7hh45XrpVQ:cO2cl/+2WSoZ7uXLp7hh45XtS

Malware Config

Targets

    • Target

      9e0ec049617b681301bd6c970c461133e08cb0c0f4bb4be1241dc8ba6de43642

    • Size

      274KB

    • MD5

      d7de0cc636944a78ef28f674e67798d3

    • SHA1

      3d167a70946f951ca0f29facca8ed3b991d4720a

    • SHA256

      9e0ec049617b681301bd6c970c461133e08cb0c0f4bb4be1241dc8ba6de43642

    • SHA512

      4b6a9fc1787ef06473a353b8abe509e8460fa38be40a45d32783ca190d428bb078d80dbb1fb84be2f706b37ae9621cc671176008a6e10d553a1caa602866e7c4

    • SSDEEP

      3072:7xXV86YGJwDUbcVFxaWR5ReccWtH37SV8EY1Xx0/iVRvJTcpSbP3YgV2qs64j:7VLwBVFxBSKh0/IDc2fVS

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks