smokeloader | 094593979bdab5c68d359b65d896aca5d966d665becc71d800b16a3f2da073e1 | Triage

Sharing

General

Target

df03aa901666b1040b97bda3fe172cc4_JaffaCakes118
Size

40KB
Sample

240913-2c66kssdrq
MD5

df03aa901666b1040b97bda3fe172cc4
SHA1

47a361e0fd8ce6964360c42467f99ed80661a952
SHA256

094593979bdab5c68d359b65d896aca5d966d665becc71d800b16a3f2da073e1
SHA512

31ef106c86a90b18e64d72015671f5491575f1de342b161274fb9b5c9d63c41efdd08bab128a4f8e0e9e673d737000f8dfaf410741db5122569a506adad01d7c
SSDEEP

768:GCv9akOt/iIEzj85VFubf1F2/RDyp7oHwzwVIGwnoNHBv+gmT0q:Vv9aJ/OjyPYF2AKQIwnoNE

Score

10^/10

smokeloader 9998 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

9998

Targets

- Target
  
  df03aa901666b1040b97bda3fe172cc4_JaffaCakes118
- Size
  
  40KB
- MD5
  
  df03aa901666b1040b97bda3fe172cc4
- SHA1
  
  47a361e0fd8ce6964360c42467f99ed80661a952
- SHA256
  
  094593979bdab5c68d359b65d896aca5d966d665becc71d800b16a3f2da073e1
- SHA512
  
  31ef106c86a90b18e64d72015671f5491575f1de342b161274fb9b5c9d63c41efdd08bab128a4f8e0e9e673d737000f8dfaf410741db5122569a506adad01d7c
- SSDEEP
  
  768:GCv9akOt/iIEzj85VFubf1F2/RDyp7oHwzwVIGwnoNHBv+gmT0q:Vv9aJ/OjyPYF2AKQIwnoNE
Score

10^/10

smokeloader 9998 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloader9998backdoortrojan

behavioral2

smokeloader9998backdoordiscoverytrojan