General

  • Target

    095aca992c0eb7e22736c28db0b583917cd712c2d550ddb848849c979c8a1ba0

  • Size

    261KB

  • Sample

    230114-cjzmmsgd74

  • MD5

    85561d3a6e08461a1008ca525ecb7b8b

  • SHA1

    dc1dc7dcc4a01850e282dadeb4fb1624369f7b2c

  • SHA256

    095aca992c0eb7e22736c28db0b583917cd712c2d550ddb848849c979c8a1ba0

  • SHA512

    4957f2e4aa3bdf4659bcc7cd8f958015ff365de2ffebdb5472fe7be89903db6128402f9195af1ec91a47edd2997c63ebb83da87ffb1b3d7ffb0c850c03e8647c

  • SSDEEP

    3072:dXWhxXC5Jp9K0nOAFjSXxnSsapb8pBI8jwWRjoV:Z4MpAwmS5pgpRjFE

Malware Config

Targets

    • Target

      095aca992c0eb7e22736c28db0b583917cd712c2d550ddb848849c979c8a1ba0

    • Size

      261KB

    • MD5

      85561d3a6e08461a1008ca525ecb7b8b

    • SHA1

      dc1dc7dcc4a01850e282dadeb4fb1624369f7b2c

    • SHA256

      095aca992c0eb7e22736c28db0b583917cd712c2d550ddb848849c979c8a1ba0

    • SHA512

      4957f2e4aa3bdf4659bcc7cd8f958015ff365de2ffebdb5472fe7be89903db6128402f9195af1ec91a47edd2997c63ebb83da87ffb1b3d7ffb0c850c03e8647c

    • SSDEEP

      3072:dXWhxXC5Jp9K0nOAFjSXxnSsapb8pBI8jwWRjoV:Z4MpAwmS5pgpRjFE

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks