General

  • Target

    74ec7188361182f24301003f9d156d6a9b4dfb438f98731c5e525c782763f978

  • Size

    194KB

  • Sample

    230208-actfyagc83

  • MD5

    f8427b08ac727626627e7bf690dba7dc

  • SHA1

    835ffec5aeecde9838755c789abe576eb360ea59

  • SHA256

    74ec7188361182f24301003f9d156d6a9b4dfb438f98731c5e525c782763f978

  • SHA512

    cad22eb4ad19dec53b676aaa16d927e419b5ab50ea67294c01ffa4b2959b84323aaa9279c3db38dbd24bd75dfb7261af347832118c131b46fdfeedfc1f3839a9

  • SSDEEP

    3072:Ff8OwwHIEWFNALm4wNWoa5FCN/+TpWlvi5qUG33bJJ8YZvpn:Ff8lnaLmTN6CN/+T4MIUS3/Zp

Malware Config

Targets

    • Target

      74ec7188361182f24301003f9d156d6a9b4dfb438f98731c5e525c782763f978

    • Size

      194KB

    • MD5

      f8427b08ac727626627e7bf690dba7dc

    • SHA1

      835ffec5aeecde9838755c789abe576eb360ea59

    • SHA256

      74ec7188361182f24301003f9d156d6a9b4dfb438f98731c5e525c782763f978

    • SHA512

      cad22eb4ad19dec53b676aaa16d927e419b5ab50ea67294c01ffa4b2959b84323aaa9279c3db38dbd24bd75dfb7261af347832118c131b46fdfeedfc1f3839a9

    • SSDEEP

      3072:Ff8OwwHIEWFNALm4wNWoa5FCN/+TpWlvi5qUG33bJJ8YZvpn:Ff8lnaLmTN6CN/+T4MIUS3/Zp

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks