General

  • Target

    8fb03687976a80f00e8e495c7de9a908ce4b8a9e0f65a50b222a7e73a4d9dda9

  • Size

    216KB

  • Sample

    221220-wytjqadf7s

  • MD5

    945db72ad5602bdb04afb6016e8cae9d

  • SHA1

    6b2d8d47a168c2d2942c594149693699c224d010

  • SHA256

    8fb03687976a80f00e8e495c7de9a908ce4b8a9e0f65a50b222a7e73a4d9dda9

  • SHA512

    c1159ede59f220f3e9655dc19371a19d21ea35528011ab4620c4ddb2cd54d978c947061cd83a8aa4c8978422c8199225b8df16c443e8fe18572dcfdf00d1f7ba

  • SSDEEP

    3072:hkT/LToV50DRktZf2i0PIYc7IPMECu7b/FxRwFBSkNHCDml:27LTlRk7B0GIkzmtQ7SWCa

Malware Config

Targets

    • Target

      8fb03687976a80f00e8e495c7de9a908ce4b8a9e0f65a50b222a7e73a4d9dda9

    • Size

      216KB

    • MD5

      945db72ad5602bdb04afb6016e8cae9d

    • SHA1

      6b2d8d47a168c2d2942c594149693699c224d010

    • SHA256

      8fb03687976a80f00e8e495c7de9a908ce4b8a9e0f65a50b222a7e73a4d9dda9

    • SHA512

      c1159ede59f220f3e9655dc19371a19d21ea35528011ab4620c4ddb2cd54d978c947061cd83a8aa4c8978422c8199225b8df16c443e8fe18572dcfdf00d1f7ba

    • SSDEEP

      3072:hkT/LToV50DRktZf2i0PIYc7IPMECu7b/FxRwFBSkNHCDml:27LTlRk7B0GIkzmtQ7SWCa

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks