smokeloader | b1727b68ed55f3d4fe81162d65c7c94c494dce50baf07d8f6b0030629c50f079 | Triage

Sharing

General

Target

e86a8be3088ea0a82300b357e1235e5d_JaffaCakes118
Size

197KB
Sample

240918-f4n87avfmj
MD5

e86a8be3088ea0a82300b357e1235e5d
SHA1

c7d80be138990aece95b7a54b3c5fa1ad45198c2
SHA256

b1727b68ed55f3d4fe81162d65c7c94c494dce50baf07d8f6b0030629c50f079
SHA512

fa94b237bc556cd30e0552e7c995530e7e2fe4e69039c8b933321c481c9f6cbff74a9792615abbb412fefb08e40bced319112a3cfaa820fc32c20e36203d1ab3
SSDEEP

3072:MCg7inY8q9GOwE4XBNzavQypXW/4JcIiOsOaEGSAcrrx+qmU9Haqghy/TMh:MCg7Z9KII6XW/4CIQOcSAcZNma684h

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  e86a8be3088ea0a82300b357e1235e5d_JaffaCakes118
- Size
  
  197KB
- MD5
  
  e86a8be3088ea0a82300b357e1235e5d
- SHA1
  
  c7d80be138990aece95b7a54b3c5fa1ad45198c2
- SHA256
  
  b1727b68ed55f3d4fe81162d65c7c94c494dce50baf07d8f6b0030629c50f079
- SHA512
  
  fa94b237bc556cd30e0552e7c995530e7e2fe4e69039c8b933321c481c9f6cbff74a9792615abbb412fefb08e40bced319112a3cfaa820fc32c20e36203d1ab3
- SSDEEP
  
  3072:MCg7inY8q9GOwE4XBNzavQypXW/4JcIiOsOaEGSAcrrx+qmU9Haqghy/TMh:MCg7Z9KII6XW/4CIQOcSAcZNma684h
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan