General

  • Target

    50b0938a1568e1357635f0362aae2b739d27ca5e5cc907d1002334e516f60084

  • Size

    361KB

  • Sample

    230105-env65aed2t

  • MD5

    c3e59ea28d92f3ab5311bc0472684eae

  • SHA1

    06a2b9ec14f0412f01fd6953ffba5d6a5339bb7c

  • SHA256

    50b0938a1568e1357635f0362aae2b739d27ca5e5cc907d1002334e516f60084

  • SHA512

    257dc42daabdb788f652254e232d5db2d75422d38c0cf3f4df1a7cea5c0a7d7f7afce00f43658ae1c7a70f64843fcf3626f423aafe712484024c182147eeb707

  • SSDEEP

    6144:gMLq5pF2yPj1h+Q3lwdszTUJJtQoxupmLq6PhjT:gMwpF2kOM0AsQoxupmLq6P

Malware Config

Targets

    • Target

      50b0938a1568e1357635f0362aae2b739d27ca5e5cc907d1002334e516f60084

    • Size

      361KB

    • MD5

      c3e59ea28d92f3ab5311bc0472684eae

    • SHA1

      06a2b9ec14f0412f01fd6953ffba5d6a5339bb7c

    • SHA256

      50b0938a1568e1357635f0362aae2b739d27ca5e5cc907d1002334e516f60084

    • SHA512

      257dc42daabdb788f652254e232d5db2d75422d38c0cf3f4df1a7cea5c0a7d7f7afce00f43658ae1c7a70f64843fcf3626f423aafe712484024c182147eeb707

    • SSDEEP

      6144:gMLq5pF2yPj1h+Q3lwdszTUJJtQoxupmLq6PhjT:gMwpF2kOM0AsQoxupmLq6P

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks