General

  • Target

    a03bf9dd5b8f6d786ecc6eea97088c166b78dfc82418e8bb60d4b069d36fa8c6

  • Size

    328KB

  • Sample

    230110-dhyvdsag69

  • MD5

    b96c3635df0a519e63c7d74cc0c04ccf

  • SHA1

    fce91298362c9dfce8a2c0870932fac1963950b2

  • SHA256

    a03bf9dd5b8f6d786ecc6eea97088c166b78dfc82418e8bb60d4b069d36fa8c6

  • SHA512

    5c14e5d195ecea29e66e42f7d5ef36e8ed88a699683ce38ae449bb401255abd35c5a38e0ca3a94e6afdd370da4926cf7a0ca31622393b882738449b9fc82579d

  • SSDEEP

    6144:s5GrSXwX6hmMmTHVMhLSQMUn6G7dBA0XeJY:sEudh+DVDGbO

Malware Config

Targets

    • Target

      a03bf9dd5b8f6d786ecc6eea97088c166b78dfc82418e8bb60d4b069d36fa8c6

    • Size

      328KB

    • MD5

      b96c3635df0a519e63c7d74cc0c04ccf

    • SHA1

      fce91298362c9dfce8a2c0870932fac1963950b2

    • SHA256

      a03bf9dd5b8f6d786ecc6eea97088c166b78dfc82418e8bb60d4b069d36fa8c6

    • SHA512

      5c14e5d195ecea29e66e42f7d5ef36e8ed88a699683ce38ae449bb401255abd35c5a38e0ca3a94e6afdd370da4926cf7a0ca31622393b882738449b9fc82579d

    • SSDEEP

      6144:s5GrSXwX6hmMmTHVMhLSQMUn6G7dBA0XeJY:sEudh+DVDGbO

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks