General

  • Target

    file.exe

  • Size

    341KB

  • Sample

    230125-m3dvdsfg73

  • MD5

    250973815ae5ccaa0b928d111effe1d7

  • SHA1

    5e4f54161514a0c089e5f4d7e90cffb06bb8fbaa

  • SHA256

    fe84fac0fd7c599ee46038fe54a9dc45eb4fac8fac8dc3ed84272b100f55652c

  • SHA512

    ed54d84220a580f6b70df08308d89f5c272d9b1d9eb941f98228129f557fc168784fa7299c50a39dfcabd09b0753f163edb56844a5a505546251006e7cb07252

  • SSDEEP

    6144:uL32eg3D58Dw69VFutShtnzOjq7VWRFBMolz9095m:ur2x3in9VFuSHt7VWR5lz5

Malware Config

Targets

    • Target

      file.exe

    • Size

      341KB

    • MD5

      250973815ae5ccaa0b928d111effe1d7

    • SHA1

      5e4f54161514a0c089e5f4d7e90cffb06bb8fbaa

    • SHA256

      fe84fac0fd7c599ee46038fe54a9dc45eb4fac8fac8dc3ed84272b100f55652c

    • SHA512

      ed54d84220a580f6b70df08308d89f5c272d9b1d9eb941f98228129f557fc168784fa7299c50a39dfcabd09b0753f163edb56844a5a505546251006e7cb07252

    • SSDEEP

      6144:uL32eg3D58Dw69VFutShtnzOjq7VWRFBMolz9095m:ur2x3in9VFuSHt7VWR5lz5

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Execution

            Exfiltration

              Impact

                Initial Access

                  Lateral Movement

                    Persistence

                      Privilege Escalation

                        Tasks