General

  • Target

    b9447d0ae6c03f15ecb6c8c18060201b1067c1af35555c6bc69a8d87a4a6f657

  • Size

    297KB

  • Sample

    221227-n1wsvseg98

  • MD5

    f4f4daf914d7f6844e2a223b7c7b9ae1

  • SHA1

    fe3d5bd9af68e6bb58c07072eb1610124977bea7

  • SHA256

    b9447d0ae6c03f15ecb6c8c18060201b1067c1af35555c6bc69a8d87a4a6f657

  • SHA512

    cb56d0c39999f75eb6c881ee1b8ce6b7a2c3ca13db224fabc149db146e661d67b928a2457fe27110634a9c24042d2e4deff1f558e3ce4bcba1f87554db96f320

  • SSDEEP

    6144:oLY7cOKagbwNmkT+huPp58xQ3xDPkMo5zXbAc:oU7HoET+oPp58xaxDPyrbA

Malware Config

Targets

    • Target

      b9447d0ae6c03f15ecb6c8c18060201b1067c1af35555c6bc69a8d87a4a6f657

    • Size

      297KB

    • MD5

      f4f4daf914d7f6844e2a223b7c7b9ae1

    • SHA1

      fe3d5bd9af68e6bb58c07072eb1610124977bea7

    • SHA256

      b9447d0ae6c03f15ecb6c8c18060201b1067c1af35555c6bc69a8d87a4a6f657

    • SHA512

      cb56d0c39999f75eb6c881ee1b8ce6b7a2c3ca13db224fabc149db146e661d67b928a2457fe27110634a9c24042d2e4deff1f558e3ce4bcba1f87554db96f320

    • SSDEEP

      6144:oLY7cOKagbwNmkT+huPp58xQ3xDPkMo5zXbAc:oU7HoET+oPp58xaxDPyrbA

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks