General

  • Target

    966ec85c6b93c43fcb51bb9377985ae862c0701a230d20998cc903cbefb78695

  • Size

    196KB

  • Sample

    230207-hmd31ahh49

  • MD5

    1f698de6cf8caaca94dbb2caacd5ad25

  • SHA1

    552d70f2a18f3226335c4a143a0a42818b922965

  • SHA256

    966ec85c6b93c43fcb51bb9377985ae862c0701a230d20998cc903cbefb78695

  • SHA512

    14b6898f10d31560e9e7a03f7fa333138049b64d1124e8a971091a1e245ba4922225c147af0a3c3c3f7f1143ddc6fd7dd263b3dbcf13efd97b9235f161afa389

  • SSDEEP

    3072:LI+OcA8o4K0UL58PWq3d5a9a/BvLh1Hb3beHOEX4ErpwsIdI2RJkB:LI+WuML+PvHKz4Eru9dIMe

Malware Config

Targets

    • Target

      966ec85c6b93c43fcb51bb9377985ae862c0701a230d20998cc903cbefb78695

    • Size

      196KB

    • MD5

      1f698de6cf8caaca94dbb2caacd5ad25

    • SHA1

      552d70f2a18f3226335c4a143a0a42818b922965

    • SHA256

      966ec85c6b93c43fcb51bb9377985ae862c0701a230d20998cc903cbefb78695

    • SHA512

      14b6898f10d31560e9e7a03f7fa333138049b64d1124e8a971091a1e245ba4922225c147af0a3c3c3f7f1143ddc6fd7dd263b3dbcf13efd97b9235f161afa389

    • SSDEEP

      3072:LI+OcA8o4K0UL58PWq3d5a9a/BvLh1Hb3beHOEX4ErpwsIdI2RJkB:LI+WuML+PvHKz4Eru9dIMe

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks