General

  • Target

    32d2335c53ea268f7bdec141448e64191c7b2a75943176ae1c8c89931d2f267c

  • Size

    316KB

  • Sample

    221222-3hc1csfe22

  • MD5

    7129aeb9e9e6b74a4f373305b79d1ea5

  • SHA1

    28a79a9adcb483166930202f9b8a4722b409917a

  • SHA256

    32d2335c53ea268f7bdec141448e64191c7b2a75943176ae1c8c89931d2f267c

  • SHA512

    6ab0b167ec9ca32da5f785c950473e5be9cee256bfd6650fbcd830c579e335d10878e64fed0080d00b485acd5ac8e812dc27905b1307fd9dcc4b2bcbfabe8833

  • SSDEEP

    6144:lVLXhT0QVwB7xS2ZmEznUwRR0cSpQTtyzsduHNIv:lVjhTTwB7Q4mEznUwRR0TCtyYduHNI

Malware Config

Targets

    • Target

      32d2335c53ea268f7bdec141448e64191c7b2a75943176ae1c8c89931d2f267c

    • Size

      316KB

    • MD5

      7129aeb9e9e6b74a4f373305b79d1ea5

    • SHA1

      28a79a9adcb483166930202f9b8a4722b409917a

    • SHA256

      32d2335c53ea268f7bdec141448e64191c7b2a75943176ae1c8c89931d2f267c

    • SHA512

      6ab0b167ec9ca32da5f785c950473e5be9cee256bfd6650fbcd830c579e335d10878e64fed0080d00b485acd5ac8e812dc27905b1307fd9dcc4b2bcbfabe8833

    • SSDEEP

      6144:lVLXhT0QVwB7xS2ZmEznUwRR0cSpQTtyzsduHNIv:lVjhTTwB7Q4mEznUwRR0TCtyYduHNI

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks