General

  • Target

    5b4e79ecc636c607ede36df7f69e20e87ab4a7cf177a0ffb61f93eee03561d83

  • Size

    314KB

  • Sample

    221230-btzjyshh8w

  • MD5

    3118daa711b7ebf0bf74cfaf15b23093

  • SHA1

    a0a422548edbeea64a0d4f08277592f1efdce8dc

  • SHA256

    5b4e79ecc636c607ede36df7f69e20e87ab4a7cf177a0ffb61f93eee03561d83

  • SHA512

    064c2c4021735048fe1ecb90f4ec772e7fd22795e10d66a460034429e3bae716cc4cf4c8642c9d578b29b611c6614c3aa802d768aa6faab7c8f175fdc2bbe2d4

  • SSDEEP

    3072:BXv6LLUK5L9HDP9cTDYGfyP/XExI3wWgj4c0D6hENrOKbIxe01Cz5Mqdqujodd/5:ULLl4GE66H02vyIxZ1WqqdS49

Malware Config

Targets

    • Target

      5b4e79ecc636c607ede36df7f69e20e87ab4a7cf177a0ffb61f93eee03561d83

    • Size

      314KB

    • MD5

      3118daa711b7ebf0bf74cfaf15b23093

    • SHA1

      a0a422548edbeea64a0d4f08277592f1efdce8dc

    • SHA256

      5b4e79ecc636c607ede36df7f69e20e87ab4a7cf177a0ffb61f93eee03561d83

    • SHA512

      064c2c4021735048fe1ecb90f4ec772e7fd22795e10d66a460034429e3bae716cc4cf4c8642c9d578b29b611c6614c3aa802d768aa6faab7c8f175fdc2bbe2d4

    • SSDEEP

      3072:BXv6LLUK5L9HDP9cTDYGfyP/XExI3wWgj4c0D6hENrOKbIxe01Cz5Mqdqujodd/5:ULLl4GE66H02vyIxZ1WqqdS49

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks