General

  • Target

    be6636113f3267bd6867b6fac3646529a52556620dda7ef21f7ee10fdab09247

  • Size

    210KB

  • Sample

    230115-tcxm5sce8s

  • MD5

    38a67758849b212d421037888501f7b9

  • SHA1

    7824d66d201bceedf925ec01ef2bcbe66ea47b29

  • SHA256

    be6636113f3267bd6867b6fac3646529a52556620dda7ef21f7ee10fdab09247

  • SHA512

    53c5e315b23710db71a445e217a46c02f149a21f52150e7658f2042e54abeba06cfc623397cdba0201a0354ebabedcc429427d847cd395453d299cd5e1084fac

  • SSDEEP

    3072:aXDdks6t/60a5kk3XUnlIQo6LhwHPdQKnji:6W/6jXIIUuX

Malware Config

Targets

    • Target

      be6636113f3267bd6867b6fac3646529a52556620dda7ef21f7ee10fdab09247

    • Size

      210KB

    • MD5

      38a67758849b212d421037888501f7b9

    • SHA1

      7824d66d201bceedf925ec01ef2bcbe66ea47b29

    • SHA256

      be6636113f3267bd6867b6fac3646529a52556620dda7ef21f7ee10fdab09247

    • SHA512

      53c5e315b23710db71a445e217a46c02f149a21f52150e7658f2042e54abeba06cfc623397cdba0201a0354ebabedcc429427d847cd395453d299cd5e1084fac

    • SSDEEP

      3072:aXDdks6t/60a5kk3XUnlIQo6LhwHPdQKnji:6W/6jXIIUuX

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks