smokeloader | 2920c426c691ebe75f4ff8536c488dd9cd415eeb609a072fe3b88fee96690d73 | Triage

Sharing

General

Target

f43b5ecbbd5f9f3d6f866d4056f36cda_JaffaCakes118
Size

40KB
Sample

240924-wv5gta1ckb
MD5

f43b5ecbbd5f9f3d6f866d4056f36cda
SHA1

74ee9d7d1afd8092db6d0ba6cf2443a309f0bcd6
SHA256

2920c426c691ebe75f4ff8536c488dd9cd415eeb609a072fe3b88fee96690d73
SHA512

3d28d54e1c9f384b591653362de901c59fe0c340c713a67cdd42c83678a34b5923ab8f42415ed54e99da8628c2acf33085eec3c481ce5747d7d24683457b15ae
SSDEEP

768:44e4jew+udu3Yn86GPwfDjqmLPgKZSaE280bsMwRSvSduKb:NiVY8n4fDmmLPB18Dx

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  f43b5ecbbd5f9f3d6f866d4056f36cda_JaffaCakes118
- Size
  
  40KB
- MD5
  
  f43b5ecbbd5f9f3d6f866d4056f36cda
- SHA1
  
  74ee9d7d1afd8092db6d0ba6cf2443a309f0bcd6
- SHA256
  
  2920c426c691ebe75f4ff8536c488dd9cd415eeb609a072fe3b88fee96690d73
- SHA512
  
  3d28d54e1c9f384b591653362de901c59fe0c340c713a67cdd42c83678a34b5923ab8f42415ed54e99da8628c2acf33085eec3c481ce5747d7d24683457b15ae
- SSDEEP
  
  768:44e4jew+udu3Yn86GPwfDjqmLPgKZSaE280bsMwRSvSduKb:NiVY8n4fDmmLPB18Dx
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan