General

  • Target

    d270c1a6bfe1a4ba4bb170033ff448fa1421a549519250ee892f856fe101985a

  • Size

    296KB

  • Sample

    230131-txzcgaha84

  • MD5

    e272a502d081ecc2490ff3ddd70d3379

  • SHA1

    3b3ec8b681fb0432c2e17809e61b60627641bdf1

  • SHA256

    d270c1a6bfe1a4ba4bb170033ff448fa1421a549519250ee892f856fe101985a

  • SHA512

    cd00f47de843ca27db4ab99ebff5e19b7f5c0e69119a7a8b85f3d0c57026170ca270dfc39ad32ce34fe19c27b2008434d48d88d43f485ebddfecc6ef73c8eb35

  • SSDEEP

    3072:uqLuLwYaLNVRoOt/NiCDBeE0xj7pcQNU/Zx6GmqPUx6WfQz86mS6N/03MMu:YsYaLNUQFiQeEEmEyxjmqMoIxRs8Mu

Malware Config

Targets

    • Target

      d270c1a6bfe1a4ba4bb170033ff448fa1421a549519250ee892f856fe101985a

    • Size

      296KB

    • MD5

      e272a502d081ecc2490ff3ddd70d3379

    • SHA1

      3b3ec8b681fb0432c2e17809e61b60627641bdf1

    • SHA256

      d270c1a6bfe1a4ba4bb170033ff448fa1421a549519250ee892f856fe101985a

    • SHA512

      cd00f47de843ca27db4ab99ebff5e19b7f5c0e69119a7a8b85f3d0c57026170ca270dfc39ad32ce34fe19c27b2008434d48d88d43f485ebddfecc6ef73c8eb35

    • SSDEEP

      3072:uqLuLwYaLNVRoOt/NiCDBeE0xj7pcQNU/Zx6GmqPUx6WfQz86mS6N/03MMu:YsYaLNUQFiQeEEmEyxjmqMoIxRs8Mu

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks