smokeloader | 229c6f4db65ef671df9f2af39af518ed9dde8d5401c172190a936565cf2772f2 | Triage

Sharing

General

Target

c904c22971f5155e9b9b1adcc22985b7_JaffaCakes118
Size

250KB
Sample

240829-ry4bpsxajh
MD5

c904c22971f5155e9b9b1adcc22985b7
SHA1

6dd11a6cb02e53783803c7f4278138833ed5596c
SHA256

229c6f4db65ef671df9f2af39af518ed9dde8d5401c172190a936565cf2772f2
SHA512

e2315ae8c04c902d635b63e15f8efb2661036a4c8d026ab251cf166946fd6365476e0f9783aa7dfa23ac745d42c53e0afb38dc6022b3026dee096c998055fb49
SSDEEP

6144:TQIUvUbEuHWxJ8c4gtjDl01lm0XoD8tky1MfWqpppppppT:aUgwKd4gtXl23Xo4tRaf

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  c904c22971f5155e9b9b1adcc22985b7_JaffaCakes118
- Size
  
  250KB
- MD5
  
  c904c22971f5155e9b9b1adcc22985b7
- SHA1
  
  6dd11a6cb02e53783803c7f4278138833ed5596c
- SHA256
  
  229c6f4db65ef671df9f2af39af518ed9dde8d5401c172190a936565cf2772f2
- SHA512
  
  e2315ae8c04c902d635b63e15f8efb2661036a4c8d026ab251cf166946fd6365476e0f9783aa7dfa23ac745d42c53e0afb38dc6022b3026dee096c998055fb49
- SSDEEP
  
  6144:TQIUvUbEuHWxJ8c4gtjDl01lm0XoD8tky1MfWqpppppppT:aUgwKd4gtXl23Xo4tRaf
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan