Resubmissions

10/01/2023, 15:45

230110-s7dm3sge68 10

10/01/2023, 15:32

230110-sys2eage54 10

General

  • Target

    0e04c322596281ba734cddd7cb9451320f3ac7e72d2672472d2c29513e216b6f

  • Size

    280KB

  • Sample

    230110-sys2eage54

  • MD5

    7a52951208326b60f134a8c05b24fc27

  • SHA1

    2c02a6a030b2cf26e61735e7c8f9f050b0be9eb5

  • SHA256

    0e04c322596281ba734cddd7cb9451320f3ac7e72d2672472d2c29513e216b6f

  • SHA512

    1401ba2d4c090212e15ef1f38dce6b944a81a607aea8275441d26656e8a74dcd09300aecf81e361bd627e76818269c1851013ce69c09e7533538616172afc069

  • SSDEEP

    3072:D7XEq6vA0/LkYBcs4HhT5T3X1nAB21tTeKK58edOoScYuDMiqh8Z2m4FwCpjKpE9:/CDLvcs4Hh5KkteizoeTi7nEmQLr

Malware Config

Targets

    • Target

      0e04c322596281ba734cddd7cb9451320f3ac7e72d2672472d2c29513e216b6f

    • Size

      280KB

    • MD5

      7a52951208326b60f134a8c05b24fc27

    • SHA1

      2c02a6a030b2cf26e61735e7c8f9f050b0be9eb5

    • SHA256

      0e04c322596281ba734cddd7cb9451320f3ac7e72d2672472d2c29513e216b6f

    • SHA512

      1401ba2d4c090212e15ef1f38dce6b944a81a607aea8275441d26656e8a74dcd09300aecf81e361bd627e76818269c1851013ce69c09e7533538616172afc069

    • SSDEEP

      3072:D7XEq6vA0/LkYBcs4HhT5T3X1nAB21tTeKK58edOoScYuDMiqh8Z2m4FwCpjKpE9:/CDLvcs4Hh5KkteizoeTi7nEmQLr

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks