smokeloader | 8084ee8efac4778475849178b2432d431296db8de999b9d23515bf37b0dd52c1 | Triage

Sharing

General

Target

773071e972a03048c15866df0c0bb649_JaffaCakes118
Size

239KB
Sample

241028-ctkw8svrer
MD5

773071e972a03048c15866df0c0bb649
SHA1

fa963a9335bc311607040f4262d47fc75e2246ff
SHA256

8084ee8efac4778475849178b2432d431296db8de999b9d23515bf37b0dd52c1
SHA512

ac3b2f2104afc8d8e06cc899ad4a402d93f323bcea1407bb704ceb8ac860950cada0b872f5c5fa01a6a0e2abedef600097622faba035a9219c667a419e76ce4e
SSDEEP

3072:adYnv8oOlAYPu4kDyEd7I3Mjt8T/OTDprU0vyzuMkp/PubVZ1lhn1Rm9:adYv89iYG4/2EYueapRx1R

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  773071e972a03048c15866df0c0bb649_JaffaCakes118
- Size
  
  239KB
- MD5
  
  773071e972a03048c15866df0c0bb649
- SHA1
  
  fa963a9335bc311607040f4262d47fc75e2246ff
- SHA256
  
  8084ee8efac4778475849178b2432d431296db8de999b9d23515bf37b0dd52c1
- SHA512
  
  ac3b2f2104afc8d8e06cc899ad4a402d93f323bcea1407bb704ceb8ac860950cada0b872f5c5fa01a6a0e2abedef600097622faba035a9219c667a419e76ce4e
- SSDEEP
  
  3072:adYnv8oOlAYPu4kDyEd7I3Mjt8T/OTDprU0vyzuMkp/PubVZ1lhn1Rm9:adYv89iYG4/2EYueapRx1R
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan