General

  • Target

    ae12c5444fa64998b241d33d4db463b5652284f64a040eecfa9556ed580555d9

  • Size

    307KB

  • Sample

    230107-h2n7hsda43

  • MD5

    129f4ae0ce3a8dd450a4b7c0c5ac2432

  • SHA1

    017cdcbd6dabdba79ac7c43c339138a0ea053857

  • SHA256

    ae12c5444fa64998b241d33d4db463b5652284f64a040eecfa9556ed580555d9

  • SHA512

    d97b7152a34e216f4ce27b395127f452c8082d9ea1a500a0e3bb7422070cbe16a3dbf4e4b66bc4532dbfe3d78646234961950e33282192dd8fad82ff51c9448e

  • SSDEEP

    6144:jELCU8qeM/Je60hnaMz1AX45vnECPi6Wb:jE+U8qeh6gnaMxthPi

Malware Config

Targets

    • Target

      ae12c5444fa64998b241d33d4db463b5652284f64a040eecfa9556ed580555d9

    • Size

      307KB

    • MD5

      129f4ae0ce3a8dd450a4b7c0c5ac2432

    • SHA1

      017cdcbd6dabdba79ac7c43c339138a0ea053857

    • SHA256

      ae12c5444fa64998b241d33d4db463b5652284f64a040eecfa9556ed580555d9

    • SHA512

      d97b7152a34e216f4ce27b395127f452c8082d9ea1a500a0e3bb7422070cbe16a3dbf4e4b66bc4532dbfe3d78646234961950e33282192dd8fad82ff51c9448e

    • SSDEEP

      6144:jELCU8qeM/Je60hnaMz1AX45vnECPi6Wb:jE+U8qeh6gnaMxthPi

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks