General

  • Target

    b5a8f27b7cbd207386168a43f3f0ee85a18863fcb4c7fedefc3a978f9c919926

  • Size

    297KB

  • Sample

    221227-r9be3afa63

  • MD5

    942ff8a9066bdd69149f5412636ffd6e

  • SHA1

    a67e488f806352d53d867d479d1898a7886014e0

  • SHA256

    b5a8f27b7cbd207386168a43f3f0ee85a18863fcb4c7fedefc3a978f9c919926

  • SHA512

    cc80f725ca9c9a1ede7f2684f522665998363a4ea582e729b1444047fd330c6b228573f858142b4dd9d6409e76cb90fc031a26df0e0ae3005f552489a40cf887

  • SSDEEP

    6144:8aeL3R/8NFXdE4HUEhz34IUTXLC58xQ3xDPkMo5zXbAc:tezR+Xm4HUIz/uLC58xaxDPyrbA

Malware Config

Targets

    • Target

      b5a8f27b7cbd207386168a43f3f0ee85a18863fcb4c7fedefc3a978f9c919926

    • Size

      297KB

    • MD5

      942ff8a9066bdd69149f5412636ffd6e

    • SHA1

      a67e488f806352d53d867d479d1898a7886014e0

    • SHA256

      b5a8f27b7cbd207386168a43f3f0ee85a18863fcb4c7fedefc3a978f9c919926

    • SHA512

      cc80f725ca9c9a1ede7f2684f522665998363a4ea582e729b1444047fd330c6b228573f858142b4dd9d6409e76cb90fc031a26df0e0ae3005f552489a40cf887

    • SSDEEP

      6144:8aeL3R/8NFXdE4HUEhz34IUTXLC58xQ3xDPkMo5zXbAc:tezR+Xm4HUIz/uLC58xaxDPyrbA

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks