General

  • Target

    d0f5c199651d287b2fa1b5c390b31c995c1284ecd5291ac456327f7b9efedb34

  • Size

    214KB

  • Sample

    221217-j8np1agd57

  • MD5

    0b32a2b3fa507862247ed1131f80d932

  • SHA1

    817cab6b79fe06905068a632dccb21eaa8e77bbf

  • SHA256

    d0f5c199651d287b2fa1b5c390b31c995c1284ecd5291ac456327f7b9efedb34

  • SHA512

    748c7b74d18459544bedbd6b56ea605bd40689098220a243afd127caa0fa7046cf441832541dfb655ae63312c776601c08a8f32924df3406202876717ae47d8f

  • SSDEEP

    3072:0M8/KLBhN4baTR3OaxiydjiXzCyf0OoITL21AiiLszlxBobd40zwUzQRKF+:T1LBhNfisqzCyfmr1kgzlfUd40M2b

Malware Config

Targets

    • Target

      d0f5c199651d287b2fa1b5c390b31c995c1284ecd5291ac456327f7b9efedb34

    • Size

      214KB

    • MD5

      0b32a2b3fa507862247ed1131f80d932

    • SHA1

      817cab6b79fe06905068a632dccb21eaa8e77bbf

    • SHA256

      d0f5c199651d287b2fa1b5c390b31c995c1284ecd5291ac456327f7b9efedb34

    • SHA512

      748c7b74d18459544bedbd6b56ea605bd40689098220a243afd127caa0fa7046cf441832541dfb655ae63312c776601c08a8f32924df3406202876717ae47d8f

    • SSDEEP

      3072:0M8/KLBhN4baTR3OaxiydjiXzCyf0OoITL21AiiLszlxBobd40zwUzQRKF+:T1LBhNfisqzCyfmr1kgzlfUd40M2b

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks