General

  • Target

    cd151393806a904e7c310e3730ccae2eea38d5b5231178a8e2f63447978a2fc6

  • Size

    259KB

  • Sample

    230108-y9dczsab6x

  • MD5

    67dda64e046158fdd95d6e92d8d9ffae

  • SHA1

    0b7b003f2725f0bdfe134e0060af266af9dde580

  • SHA256

    cd151393806a904e7c310e3730ccae2eea38d5b5231178a8e2f63447978a2fc6

  • SHA512

    d560abef39fca152df6c4bb75690fe19805ff61d4892a5f16cce73f05d9cf5579942c1afa93013ab27f0fa08e579be4a6604018027198d432003e9dd12dc54b2

  • SSDEEP

    3072:0Xh0dusR9Lr8K/uj7gZ5GDo6+KkxkSkvebQ7RHwQhJu/TWAvMRDbRt9hZCRRzMuw:wkLrij7gSUsebQ1nyEbR5cqgd3

Malware Config

Targets

    • Target

      cd151393806a904e7c310e3730ccae2eea38d5b5231178a8e2f63447978a2fc6

    • Size

      259KB

    • MD5

      67dda64e046158fdd95d6e92d8d9ffae

    • SHA1

      0b7b003f2725f0bdfe134e0060af266af9dde580

    • SHA256

      cd151393806a904e7c310e3730ccae2eea38d5b5231178a8e2f63447978a2fc6

    • SHA512

      d560abef39fca152df6c4bb75690fe19805ff61d4892a5f16cce73f05d9cf5579942c1afa93013ab27f0fa08e579be4a6604018027198d432003e9dd12dc54b2

    • SSDEEP

      3072:0Xh0dusR9Lr8K/uj7gZ5GDo6+KkxkSkvebQ7RHwQhJu/TWAvMRDbRt9hZCRRzMuw:wkLrij7gSUsebQ1nyEbR5cqgd3

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks