General

  • Target

    file.exe

  • Size

    196KB

  • Sample

    230209-mkzn5sge69

  • MD5

    ad024d5d58c173e9519dd60656474a7e

  • SHA1

    1c99f4b52c79b8bdc9b408630f83dda37a191fc6

  • SHA256

    74fc26065e1968fb4295e10cc092f0023057559a422fd45983a98d68ddd43180

  • SHA512

    500f3ac2c53124f169dce8e88d3a4d3ea7660a7ecded16f57cfffbafbce4dc7d3a6167074716297e4a02420d2b1a8b4fc0329f2eb775e314f5406dfbdc458546

  • SSDEEP

    3072:t2qVOj5ci4d2PDXLA4RWkd5mi3as2QlSIkIxShsyKUwCsdD:UqVUjnrL3RC2asqIx8Drk

Malware Config

Targets

    • Target

      file.exe

    • Size

      196KB

    • MD5

      ad024d5d58c173e9519dd60656474a7e

    • SHA1

      1c99f4b52c79b8bdc9b408630f83dda37a191fc6

    • SHA256

      74fc26065e1968fb4295e10cc092f0023057559a422fd45983a98d68ddd43180

    • SHA512

      500f3ac2c53124f169dce8e88d3a4d3ea7660a7ecded16f57cfffbafbce4dc7d3a6167074716297e4a02420d2b1a8b4fc0329f2eb775e314f5406dfbdc458546

    • SSDEEP

      3072:t2qVOj5ci4d2PDXLA4RWkd5mi3as2QlSIkIxShsyKUwCsdD:UqVUjnrL3RC2asqIx8Drk

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks