General

  • Target

    84b19cb1f5bf04434a1e490ff4d8d58f9d116de798dde19995e1bc6010a58f65

  • Size

    226KB

  • Sample

    221224-fr5emscg6v

  • MD5

    579b650b39de3b4418ba59a41c69ef8b

  • SHA1

    3724067bf0c773adb03188d476e5ef45752443ec

  • SHA256

    84b19cb1f5bf04434a1e490ff4d8d58f9d116de798dde19995e1bc6010a58f65

  • SHA512

    dc137571f1e112f48c77872dd6df3691a25969e6b7d991c63de9f1d569d519ca282ad80dc192995cf6a4ca4abf4a25e5c670d8bed8c15852196d20367bd14f12

  • SSDEEP

    3072:DrNcjLKwBi5KC+fzal9qLQNvoPmCBTZmC9URPH8oSS989aKY3Ox6qQo3:WLKqgE9Q9c7mC908o7cDHk5o

Malware Config

Targets

    • Target

      84b19cb1f5bf04434a1e490ff4d8d58f9d116de798dde19995e1bc6010a58f65

    • Size

      226KB

    • MD5

      579b650b39de3b4418ba59a41c69ef8b

    • SHA1

      3724067bf0c773adb03188d476e5ef45752443ec

    • SHA256

      84b19cb1f5bf04434a1e490ff4d8d58f9d116de798dde19995e1bc6010a58f65

    • SHA512

      dc137571f1e112f48c77872dd6df3691a25969e6b7d991c63de9f1d569d519ca282ad80dc192995cf6a4ca4abf4a25e5c670d8bed8c15852196d20367bd14f12

    • SSDEEP

      3072:DrNcjLKwBi5KC+fzal9qLQNvoPmCBTZmC9URPH8oSS989aKY3Ox6qQo3:WLKqgE9Q9c7mC908o7cDHk5o

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks