General

  • Target

    e3f59a37a237cf5838242da731ce8cb3bb554b841add282f0081648e06bed21b

  • Size

    283KB

  • Sample

    230113-jmfghaba8x

  • MD5

    0c99892bc14a63e2a50720c6d3c2c7e2

  • SHA1

    1c0d137185149dab9185e5de9cbaa2fe2e51b666

  • SHA256

    e3f59a37a237cf5838242da731ce8cb3bb554b841add282f0081648e06bed21b

  • SHA512

    474e50c325ed4d30a1d0c87320ff7d5d19d02132f041465201bcf5bfec28671b8461bbdb88458a03ada8982605e8aabfdc7e4bc4cf925edf83c0c4094dbaf713

  • SSDEEP

    3072:ZQX3jNGL8yNFEpr5Jf9PQAYT+RUhMV8Lj6Yzure4zxE/+XC3wZIGTACb+uq8EYss:ZEMLbNFE7IA0oqx3vuZzxEmXCgyGczk

Malware Config

Targets

    • Target

      e3f59a37a237cf5838242da731ce8cb3bb554b841add282f0081648e06bed21b

    • Size

      283KB

    • MD5

      0c99892bc14a63e2a50720c6d3c2c7e2

    • SHA1

      1c0d137185149dab9185e5de9cbaa2fe2e51b666

    • SHA256

      e3f59a37a237cf5838242da731ce8cb3bb554b841add282f0081648e06bed21b

    • SHA512

      474e50c325ed4d30a1d0c87320ff7d5d19d02132f041465201bcf5bfec28671b8461bbdb88458a03ada8982605e8aabfdc7e4bc4cf925edf83c0c4094dbaf713

    • SSDEEP

      3072:ZQX3jNGL8yNFEpr5Jf9PQAYT+RUhMV8Lj6Yzure4zxE/+XC3wZIGTACb+uq8EYss:ZEMLbNFE7IA0oqx3vuZzxEmXCgyGczk

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks