General

  • Target

    d21a17b33cf67482d48f697eab34d79e87b321b4c8815a92d7a54a0393275feb

  • Size

    284KB

  • Sample

    230205-2st6ysbb86

  • MD5

    04fa4cfda650d6672ac8ba96b4b0d219

  • SHA1

    eac09bbace1031d9f2cdc0c4224613ec509fa098

  • SHA256

    d21a17b33cf67482d48f697eab34d79e87b321b4c8815a92d7a54a0393275feb

  • SHA512

    1ee52fb2abedd2f45a7087cc6b4427cf609a28df985abb667e94c47e02c6bdac49ba4301c6297babc8e2526879ae585b94b849289fb909c1c3402ebbcd9ad57b

  • SSDEEP

    3072:KKHxOra3zCc4zLz/FVWDc5encSUJeT53NfFFCYaNPhaBIHDl:3HxLSLz9VeweT5FFMVgBc

Malware Config

Targets

    • Target

      d21a17b33cf67482d48f697eab34d79e87b321b4c8815a92d7a54a0393275feb

    • Size

      284KB

    • MD5

      04fa4cfda650d6672ac8ba96b4b0d219

    • SHA1

      eac09bbace1031d9f2cdc0c4224613ec509fa098

    • SHA256

      d21a17b33cf67482d48f697eab34d79e87b321b4c8815a92d7a54a0393275feb

    • SHA512

      1ee52fb2abedd2f45a7087cc6b4427cf609a28df985abb667e94c47e02c6bdac49ba4301c6297babc8e2526879ae585b94b849289fb909c1c3402ebbcd9ad57b

    • SSDEEP

      3072:KKHxOra3zCc4zLz/FVWDc5encSUJeT53NfFFCYaNPhaBIHDl:3HxLSLz9VeweT5FFMVgBc

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks