smokeloader

General

Target

363fece1255b4dd7f688225dbc090e8b_JaffaCakes118
Size

262KB
Sample

240330-hrz62abd23
MD5

363fece1255b4dd7f688225dbc090e8b
SHA1

624e505f3b828e0f27bd8c2d82687def04ea63d9
SHA256

477af70aacb75d845210fbb00fe37d4c6bd22422ed62dc859ebdf1dc93433c3a
SHA512

70db537ae80612b88db8dfcb33d61a1deecd97555c2d150a9e2fdbaa4a6e89ca2600afbc07eaa6fd32342f044b602951d8bacaebbea7a4efe3c6fafb5054ccab
SSDEEP

3072:j0jp77ySS1p9kJY6VFNrHvxd9vnb62Ok37SeMz9A3p3SHgd/ktSosZEY5XdfcmMC:MSwpd9vblHWe69A3dL/k0oaXV/7

Score

10^/10

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Extracted

Family

smokeloader

Version

2020

C2

http://directorycart.com/upload/

http://tierzahnarzt.at/upload/

http://streetofcards.com/upload/

http://ycdfzd.com/upload/

http://successcoachceo.com/upload/

http://uhvu.cn/upload/

http://japanarticle.com/upload/

rc4.i32

Targets

- Target
  
  363fece1255b4dd7f688225dbc090e8b_JaffaCakes118
- Size
  
  262KB
- MD5
  
  363fece1255b4dd7f688225dbc090e8b
- SHA1
  
  624e505f3b828e0f27bd8c2d82687def04ea63d9
- SHA256
  
  477af70aacb75d845210fbb00fe37d4c6bd22422ed62dc859ebdf1dc93433c3a
- SHA512
  
  70db537ae80612b88db8dfcb33d61a1deecd97555c2d150a9e2fdbaa4a6e89ca2600afbc07eaa6fd32342f044b602951d8bacaebbea7a4efe3c6fafb5054ccab
- SSDEEP
  
  3072:j0jp77ySS1p9kJY6VFNrHvxd9vnb62Ok37SeMz9A3p3SHgd/ktSosZEY5XdfcmMC:MSwpd9vblHWe69A3dL/k0oaXV/7
Score

10^/10

smokeloader pub3 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Extracted

Targets

Deletes itself

Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2