General

  • Target

    f7bf40b746eb060cd28f1a76ab5eedeee4111a4ed4dbfeb19384eebce6f7f2c3

  • Size

    211KB

  • Sample

    230102-w44xmsfb53

  • MD5

    1778161a622ac4ba0f826cdcaae7f6b5

  • SHA1

    39bc1d5cb2d6988d2ea55937e5ea483905fa750d

  • SHA256

    f7bf40b746eb060cd28f1a76ab5eedeee4111a4ed4dbfeb19384eebce6f7f2c3

  • SHA512

    1136cd09526def85bd92d19b24d09e32ed4bfe75ee6d6494ac612fa7ae6413009b13823e8028b36e487631d066834090b1561f4e017670fe8e057ba90220b728

  • SSDEEP

    3072:OXc852veLu1GBp523O1XgNX8a2uhxw47hbZWYg4WBpZh10SbBYSP:W+eLfBhA3447F493+S9

Malware Config

Targets

    • Target

      f7bf40b746eb060cd28f1a76ab5eedeee4111a4ed4dbfeb19384eebce6f7f2c3

    • Size

      211KB

    • MD5

      1778161a622ac4ba0f826cdcaae7f6b5

    • SHA1

      39bc1d5cb2d6988d2ea55937e5ea483905fa750d

    • SHA256

      f7bf40b746eb060cd28f1a76ab5eedeee4111a4ed4dbfeb19384eebce6f7f2c3

    • SHA512

      1136cd09526def85bd92d19b24d09e32ed4bfe75ee6d6494ac612fa7ae6413009b13823e8028b36e487631d066834090b1561f4e017670fe8e057ba90220b728

    • SSDEEP

      3072:OXc852veLu1GBp523O1XgNX8a2uhxw47hbZWYg4WBpZh10SbBYSP:W+eLfBhA3447F493+S9

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks