General

  • Target

    fd7602a37185f951152308c2ce1b92fea264e9e53d80ff00e918a71871a74df9

  • Size

    260KB

  • Sample

    230108-wst83ahg3y

  • MD5

    6fd938309e46f566438fabaad9fb5113

  • SHA1

    0eb57794ce9e734c41959e221b32457e79c92d73

  • SHA256

    fd7602a37185f951152308c2ce1b92fea264e9e53d80ff00e918a71871a74df9

  • SHA512

    b20609314b07bb75f4f6e32390787e043cfc4a12edcc8cd94371c5a0ce70da39faaad32d171706fc3ab90458620c76903210e376341f4f0b72956bea3630ba78

  • SSDEEP

    3072:lXhu5kM4vzLGQE3w3Cqd5n2c+03u2aaE327AHtN9hZCRRzMuWZgd3i:hJLGa3CqGEu2aaE32stZcqgd3

Malware Config

Targets

    • Target

      fd7602a37185f951152308c2ce1b92fea264e9e53d80ff00e918a71871a74df9

    • Size

      260KB

    • MD5

      6fd938309e46f566438fabaad9fb5113

    • SHA1

      0eb57794ce9e734c41959e221b32457e79c92d73

    • SHA256

      fd7602a37185f951152308c2ce1b92fea264e9e53d80ff00e918a71871a74df9

    • SHA512

      b20609314b07bb75f4f6e32390787e043cfc4a12edcc8cd94371c5a0ce70da39faaad32d171706fc3ab90458620c76903210e376341f4f0b72956bea3630ba78

    • SSDEEP

      3072:lXhu5kM4vzLGQE3w3Cqd5n2c+03u2aaE327AHtN9hZCRRzMuWZgd3i:hJLGa3CqGEu2aaE32stZcqgd3

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks