General

  • Target

    45bf21303f9887e7d5fdded6863ad58fb27f12c942fbf9aa81526e1ee1cb80e9

  • Size

    241KB

  • Sample

    230101-ljz3vabd88

  • MD5

    855e40d84bcaab2684a1a364bf737a5a

  • SHA1

    69cc4484578ca23b58202ec7aab85dcaa547b6c3

  • SHA256

    45bf21303f9887e7d5fdded6863ad58fb27f12c942fbf9aa81526e1ee1cb80e9

  • SHA512

    20049af9bfa346a4788885585552627aa13c5d66eb92a5a45aea0e43cf3d34e954974ecc10730fe30de8f8c3e87b32a4c22643a5557c33e1b13f59408a2cae41

  • SSDEEP

    3072:/XcX90LDcPFd9Rinc5kPUslXuYagLvMxVSAlmqcBxRt27hZY:vHL01m3t3t7Mi/73IZY

Malware Config

Targets

    • Target

      45bf21303f9887e7d5fdded6863ad58fb27f12c942fbf9aa81526e1ee1cb80e9

    • Size

      241KB

    • MD5

      855e40d84bcaab2684a1a364bf737a5a

    • SHA1

      69cc4484578ca23b58202ec7aab85dcaa547b6c3

    • SHA256

      45bf21303f9887e7d5fdded6863ad58fb27f12c942fbf9aa81526e1ee1cb80e9

    • SHA512

      20049af9bfa346a4788885585552627aa13c5d66eb92a5a45aea0e43cf3d34e954974ecc10730fe30de8f8c3e87b32a4c22643a5557c33e1b13f59408a2cae41

    • SSDEEP

      3072:/XcX90LDcPFd9Rinc5kPUslXuYagLvMxVSAlmqcBxRt27hZY:vHL01m3t3t7Mi/73IZY

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks