General

  • Target

    6831b3e0a71212510c30f9bca48cc87ee83d88e327427d1475381eaa9c23415f

  • Size

    296KB

  • Sample

    230131-vk16zahb82

  • MD5

    3dfc35bc88b31d921255680def5cc345

  • SHA1

    ef01eb8fb4fa5d08f681a3cf6e4a81a25e798ba4

  • SHA256

    6831b3e0a71212510c30f9bca48cc87ee83d88e327427d1475381eaa9c23415f

  • SHA512

    2e7bd3f9c8e4273748116ea11de5093b36914b36c94e6538b4ba9c7facc5af7da309cfe440e712e060fe4b79efffa523b2f79a94bb8e69023ffe6303b28a8d03

  • SSDEEP

    3072:T7uFlYRL9eRA3uxqrMoHlNprUbsOpS0NdN6BYsELY6TTimqPUx6WfQz86G3MMo:2FqRL9b3u6T+IKAmamqMoIl8M

Malware Config

Targets

    • Target

      6831b3e0a71212510c30f9bca48cc87ee83d88e327427d1475381eaa9c23415f

    • Size

      296KB

    • MD5

      3dfc35bc88b31d921255680def5cc345

    • SHA1

      ef01eb8fb4fa5d08f681a3cf6e4a81a25e798ba4

    • SHA256

      6831b3e0a71212510c30f9bca48cc87ee83d88e327427d1475381eaa9c23415f

    • SHA512

      2e7bd3f9c8e4273748116ea11de5093b36914b36c94e6538b4ba9c7facc5af7da309cfe440e712e060fe4b79efffa523b2f79a94bb8e69023ffe6303b28a8d03

    • SSDEEP

      3072:T7uFlYRL9eRA3uxqrMoHlNprUbsOpS0NdN6BYsELY6TTimqPUx6WfQz86G3MMo:2FqRL9b3u6T+IKAmamqMoIl8M

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks