General

  • Target

    6728d2844aad7a0cdc33fd7b667f53d3972d3bf043448b67f924d6b6ed208ef8

  • Size

    225KB

  • Sample

    230201-j3ak7aec8w

  • MD5

    e160edc9531a4f08ea5834049db9564f

  • SHA1

    387919829b437bf3cbbfdc5d761ced5050044a8b

  • SHA256

    6728d2844aad7a0cdc33fd7b667f53d3972d3bf043448b67f924d6b6ed208ef8

  • SHA512

    94d26b541b9c0b7ba77aa8b815c678eac435910f57c5920676b15fb0e39bcbffe8b150c55b83dc673ed743d4e42661c4ed967cfc88acfcb94f6a9b59dd186577

  • SSDEEP

    3072:9WYG1W/S5HdfSbLviWu55Y4NvPVhbI/9ivfFko6/ew:9WYgRdWLvin9NvPVxKp2w

Malware Config

Targets

    • Target

      6728d2844aad7a0cdc33fd7b667f53d3972d3bf043448b67f924d6b6ed208ef8

    • Size

      225KB

    • MD5

      e160edc9531a4f08ea5834049db9564f

    • SHA1

      387919829b437bf3cbbfdc5d761ced5050044a8b

    • SHA256

      6728d2844aad7a0cdc33fd7b667f53d3972d3bf043448b67f924d6b6ed208ef8

    • SHA512

      94d26b541b9c0b7ba77aa8b815c678eac435910f57c5920676b15fb0e39bcbffe8b150c55b83dc673ed743d4e42661c4ed967cfc88acfcb94f6a9b59dd186577

    • SSDEEP

      3072:9WYG1W/S5HdfSbLviWu55Y4NvPVhbI/9ivfFko6/ew:9WYgRdWLvin9NvPVxKp2w

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks