General

  • Target

    e1d1a26711616a85bf2865a3e0571d11b611303d825f99fa5b1231bfe1ff91d6

  • Size

    260KB

  • Sample

    230114-ez3ekshg95

  • MD5

    41e6103460d1d000e05000a35917da95

  • SHA1

    2f5a3b7eac251a0f9b19a538d902c48a2bf90854

  • SHA256

    e1d1a26711616a85bf2865a3e0571d11b611303d825f99fa5b1231bfe1ff91d6

  • SHA512

    f4992c1c475b9a18b7ab64c72d8c2f8815d99bee1da1adc2102b5b1d77d369575252c60b02b46a1097b99e15586d8137038fee9bf6506d96b0b232178ba31afa

  • SSDEEP

    3072:SXGuWhUL5b3+NGQbOK2TWv27cUONq5kyxH2apb8pBI8jwWRjoV:SdQvbOlKvOdON+pgpRjFE

Malware Config

Targets

    • Target

      e1d1a26711616a85bf2865a3e0571d11b611303d825f99fa5b1231bfe1ff91d6

    • Size

      260KB

    • MD5

      41e6103460d1d000e05000a35917da95

    • SHA1

      2f5a3b7eac251a0f9b19a538d902c48a2bf90854

    • SHA256

      e1d1a26711616a85bf2865a3e0571d11b611303d825f99fa5b1231bfe1ff91d6

    • SHA512

      f4992c1c475b9a18b7ab64c72d8c2f8815d99bee1da1adc2102b5b1d77d369575252c60b02b46a1097b99e15586d8137038fee9bf6506d96b0b232178ba31afa

    • SSDEEP

      3072:SXGuWhUL5b3+NGQbOK2TWv27cUONq5kyxH2apb8pBI8jwWRjoV:SdQvbOlKvOdON+pgpRjFE

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Deletes itself

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks