General

  • Target

    333d0eeabf2a994550b2f9c7e0b91af8d519eaa97e0147d38a113bea21501c0c

  • Size

    301KB

  • Sample

    221227-2sljtabg81

  • MD5

    7ef44c2a26ab14787e610b9b16e207e3

  • SHA1

    40ec555c2a764b62d3554aa1a4607d46a6288ec1

  • SHA256

    333d0eeabf2a994550b2f9c7e0b91af8d519eaa97e0147d38a113bea21501c0c

  • SHA512

    f3da5697f8f86967bf4c2e2905db5b4ee3d2b490f291e5bbfd16836591304fc594e21f257ac9176362ea574e22b718cc5c74d167f05b43312a2553faeb9e1d03

  • SSDEEP

    6144:yWLnwlbBPLZOKvKNy9UZdLaYon5Jk4eROw:dDwllVdvudin5JF

Malware Config

Targets

    • Target

      333d0eeabf2a994550b2f9c7e0b91af8d519eaa97e0147d38a113bea21501c0c

    • Size

      301KB

    • MD5

      7ef44c2a26ab14787e610b9b16e207e3

    • SHA1

      40ec555c2a764b62d3554aa1a4607d46a6288ec1

    • SHA256

      333d0eeabf2a994550b2f9c7e0b91af8d519eaa97e0147d38a113bea21501c0c

    • SHA512

      f3da5697f8f86967bf4c2e2905db5b4ee3d2b490f291e5bbfd16836591304fc594e21f257ac9176362ea574e22b718cc5c74d167f05b43312a2553faeb9e1d03

    • SSDEEP

      6144:yWLnwlbBPLZOKvKNy9UZdLaYon5Jk4eROw:dDwllVdvudin5JF

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks