smokeloader | 35f797103fd86af1bc13e3678e4807bd9d18352588d1b693150acb57936992de | Triage™

Login
Reports

Overview

overview

Static

static

3

0b880f2148...18.exe

windows7-x64

0b880f2148...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
0b880f2148d54e167fce7b0fa7ea02ee_JaffaCakes118
Size 335KB
Sample240625-as792atekn
SHA256 35f797103fd86af1bc13e3678e4807bd9d18352588d1b693150acb57936992de
MD5 0b880f2148d54e167fce7b0fa7ea02ee
SHA1 3f3bab61f057b61112b76f95e76718988f305f53
SHA512 849a375e12bd83e50f04d7ad2d064d7c1f515835fcf9147e423400cf61f1d89483b618d98a4d1c7a5e35fdc1b903e38ee7ff91850bc54288529350514f96fb25
SSDEEP 6144:z//CVcC3MOZjlRRfCqjgv961T2PG3t9PtrdaSuqeetAch8:L/gJnXa+S+KutUhqezch8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

smokeloader li11 backdoor trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0b880f2148d54e167fce7b0fa7ea02ee_JaffaCakes118.exe

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

smokeloader li11 backdoor trojan

Behavioral task

behavioral2

Sample

0b880f2148d54e167fce7b0fa7ea02ee_JaffaCakes118.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

4 signatures

150 seconds

smokeloader li11 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

li11

Extracted

Family

smokeloader

Version

2020

C2

https://olobus.casa/feedback.php
https://trusho.online/feedback.php

rc4.i32

rc4.i32

Targets

- Target
  0b880f2148d54e167fce7b0fa7ea02ee_JaffaCakes118
- Size 335KB
- SHA256 35f797103fd86af1bc13e3678e4807bd9d18352588d1b693150acb57936992de
- MD5 0b880f2148d54e167fce7b0fa7ea02ee
- SHA1 3f3bab61f057b61112b76f95e76718988f305f53
- SHA512 849a375e12bd83e50f04d7ad2d064d7c1f515835fcf9147e423400cf61f1d89483b618d98a4d1c7a5e35fdc1b903e38ee7ff91850bc54288529350514f96fb25
- SSDEEP 6144:z//CVcC3MOZjlRRfCqjgv961T2PG3t9PtrdaSuqeetAch8:L/gJnXa+S+KutUhqezch8
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

smokeloader li11 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderli11backdoortrojan

behavioral2

smokeloaderli11backdoortrojan

© 2018-2026

Terms | Privacy