General

  • Target

    5c18fb58744f6d16e34cd85bfa2761f3901b755d2d1f0081062da45223e9cbf0

  • Size

    320KB

  • Sample

    230111-3xcm5seg22

  • MD5

    1fc683ab9d85f755cf8319a78e2138b5

  • SHA1

    b32817f05254698bc978ef609c8de99239fc7d77

  • SHA256

    5c18fb58744f6d16e34cd85bfa2761f3901b755d2d1f0081062da45223e9cbf0

  • SHA512

    dee42eee554e582c1217c8d065e140cb12343c273e2919dd495219f2af49ba6bc8cd6c9f5596cdb28e828e988de2bb58de3080d6d34fea8659f6080e7b247364

  • SSDEEP

    3072:hXO5AIMPhIlVz35ZdzyVGIjAPQvooqzM6Ga9m35wGCs0KeplCkF8M/WhJshMD5Uc:F0KwzJWRjAmrB6Gam5kO6WD5U82g

Malware Config

Targets

    • Target

      5c18fb58744f6d16e34cd85bfa2761f3901b755d2d1f0081062da45223e9cbf0

    • Size

      320KB

    • MD5

      1fc683ab9d85f755cf8319a78e2138b5

    • SHA1

      b32817f05254698bc978ef609c8de99239fc7d77

    • SHA256

      5c18fb58744f6d16e34cd85bfa2761f3901b755d2d1f0081062da45223e9cbf0

    • SHA512

      dee42eee554e582c1217c8d065e140cb12343c273e2919dd495219f2af49ba6bc8cd6c9f5596cdb28e828e988de2bb58de3080d6d34fea8659f6080e7b247364

    • SSDEEP

      3072:hXO5AIMPhIlVz35ZdzyVGIjAPQvooqzM6Ga9m35wGCs0KeplCkF8M/WhJshMD5Uc:F0KwzJWRjAmrB6Gam5kO6WD5U82g

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks