General

  • Target

    d6dd09b2a07d1e0ffa6bb3eaf8173e7cd158a13db35189500c3dff37bfee0a71

  • Size

    194KB

  • Sample

    230208-e1f8qsgf3z

  • MD5

    ba266f8e0385c4b245b1f5313e81fb33

  • SHA1

    d6999dbcd0fa9c3b07f1fb6ddaefefa8465a61de

  • SHA256

    d6dd09b2a07d1e0ffa6bb3eaf8173e7cd158a13db35189500c3dff37bfee0a71

  • SHA512

    752d5646fdc8919b1fb7f2b58d7fca54c995931c52e608fc48df44edefaef9ec0c8874b17fc80045dc76aff35ac7a80ba0e7517b7e101cb5ad422f5ddc2fe5d3

  • SSDEEP

    3072:ozsOb7TKdksQDLvjmKOWja5qh8cG3FhL3cJ52ggoAVQfz:ozsI2uLvDODBLsJZgoAVQfz

Malware Config

Targets

    • Target

      d6dd09b2a07d1e0ffa6bb3eaf8173e7cd158a13db35189500c3dff37bfee0a71

    • Size

      194KB

    • MD5

      ba266f8e0385c4b245b1f5313e81fb33

    • SHA1

      d6999dbcd0fa9c3b07f1fb6ddaefefa8465a61de

    • SHA256

      d6dd09b2a07d1e0ffa6bb3eaf8173e7cd158a13db35189500c3dff37bfee0a71

    • SHA512

      752d5646fdc8919b1fb7f2b58d7fca54c995931c52e608fc48df44edefaef9ec0c8874b17fc80045dc76aff35ac7a80ba0e7517b7e101cb5ad422f5ddc2fe5d3

    • SSDEEP

      3072:ozsOb7TKdksQDLvjmKOWja5qh8cG3FhL3cJ52ggoAVQfz:ozsI2uLvDODBLsJZgoAVQfz

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks