General

  • Target

    2bba2f6e827728c4de90e1d5e2ddfa99e49ca8bd4df6d3b162324fa33d4802fe

  • Size

    197KB

  • Sample

    230213-k1r8wsbe5y

  • MD5

    85fbe5e5be1214311573d0bc17bbe4f5

  • SHA1

    6de4fb45ee815528694199d9ad61c7251aa967be

  • SHA256

    2bba2f6e827728c4de90e1d5e2ddfa99e49ca8bd4df6d3b162324fa33d4802fe

  • SHA512

    f5f4c9455a8d05b5795748ff9d775b1dc4091b19049dea2f64d758a85a319a08764af262f029723baf2ebc5fba6b6cf214bba717ba6ec8661ec6ea441b93255f

  • SSDEEP

    3072:F3BdcS0JxJ4+KIKGppNFAqC8/Tln38cxFdZJp2fcDXwN4BOO6e843Ux:F3z90PKwppNFAqXTFdXwN4o1e8f

Malware Config

Targets

    • Target

      2bba2f6e827728c4de90e1d5e2ddfa99e49ca8bd4df6d3b162324fa33d4802fe

    • Size

      197KB

    • MD5

      85fbe5e5be1214311573d0bc17bbe4f5

    • SHA1

      6de4fb45ee815528694199d9ad61c7251aa967be

    • SHA256

      2bba2f6e827728c4de90e1d5e2ddfa99e49ca8bd4df6d3b162324fa33d4802fe

    • SHA512

      f5f4c9455a8d05b5795748ff9d775b1dc4091b19049dea2f64d758a85a319a08764af262f029723baf2ebc5fba6b6cf214bba717ba6ec8661ec6ea441b93255f

    • SSDEEP

      3072:F3BdcS0JxJ4+KIKGppNFAqC8/Tln38cxFdZJp2fcDXwN4BOO6e843Ux:F3z90PKwppNFAqXTFdXwN4o1e8f

    • Detects Smokeloader packer

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks