smokeloader | 5acec93c640ee499d02f78f646af7cf65605a56fc20add62c4dabdb402943114 | Triage

Sharing

General

Target

a222db8f9ff0e29f79e58a118ce7c9ec_JaffaCakes118
Size

920KB
Sample

240817-l7mgnazfma
MD5

a222db8f9ff0e29f79e58a118ce7c9ec
SHA1

33ecbb5082fc244ab7c5492b6ead04c4e6301b71
SHA256

5acec93c640ee499d02f78f646af7cf65605a56fc20add62c4dabdb402943114
SHA512

ef5232af0d58ccf0c856963dc82f80b99d2ab66661ff873b7a074421a1df01a6c110e1768984333b4aaafa316c0cad789e71b832d07b0c2cf4c78392d42f3565
SSDEEP

3072:pO1LzxGZ9Vag6ujkyamUoo7Or0WpVyTXTDTVDhdmA:pO1LsAyjZamroJGyTXTDTVDiA

Score

10^/10

smokeloader backdoor cryptone discovery packer trojan

Malware Config

Targets

- Target
  
  a222db8f9ff0e29f79e58a118ce7c9ec_JaffaCakes118
- Size
  
  920KB
- MD5
  
  a222db8f9ff0e29f79e58a118ce7c9ec
- SHA1
  
  33ecbb5082fc244ab7c5492b6ead04c4e6301b71
- SHA256
  
  5acec93c640ee499d02f78f646af7cf65605a56fc20add62c4dabdb402943114
- SHA512
  
  ef5232af0d58ccf0c856963dc82f80b99d2ab66661ff873b7a074421a1df01a6c110e1768984333b4aaafa316c0cad789e71b832d07b0c2cf4c78392d42f3565
- SSDEEP
  
  3072:pO1LzxGZ9Vag6ujkyamUoo7Or0WpVyTXTDTVDhdmA:pO1LsAyjZamroJGyTXTDTVDiA
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan