smokeloader | 66ad2768d50eaa7164663c98cbf2b3f0e59e1ca87027e2190569d2e9996cd2f9 | Triage

Sharing

General

Target

99105f9c9a1e459e259c8958dbefaa99_JaffaCakes118
Size

239KB
Sample

241125-eh5tdasrgr
MD5

99105f9c9a1e459e259c8958dbefaa99
SHA1

86074ffbaa625adf25286ca2581fba583a247116
SHA256

66ad2768d50eaa7164663c98cbf2b3f0e59e1ca87027e2190569d2e9996cd2f9
SHA512

feddd21e2ffd27eff51e34b056cf9ab113a76736e0f39f93c5e100950c8e203b45bf744326d35bd7c32ed08e9a78e0bfa3a48fa9d3450d98476ed62329712e84
SSDEEP

6144:ie2jFeYZR3DsLsehwihb12o4nzywB/2YnjnSfRaDy:ixx/ZR30hP4zJB/2YnjnvD

Score

10^/10

smokeloader pub6 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub6

Targets

- Target
  
  99105f9c9a1e459e259c8958dbefaa99_JaffaCakes118
- Size
  
  239KB
- MD5
  
  99105f9c9a1e459e259c8958dbefaa99
- SHA1
  
  86074ffbaa625adf25286ca2581fba583a247116
- SHA256
  
  66ad2768d50eaa7164663c98cbf2b3f0e59e1ca87027e2190569d2e9996cd2f9
- SHA512
  
  feddd21e2ffd27eff51e34b056cf9ab113a76736e0f39f93c5e100950c8e203b45bf744326d35bd7c32ed08e9a78e0bfa3a48fa9d3450d98476ed62329712e84
- SSDEEP
  
  6144:ie2jFeYZR3DsLsehwihb12o4nzywB/2YnjnSfRaDy:ixx/ZR30hP4zJB/2YnjnvD
Score

10^/10

smokeloader pub6 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub6backdoortrojan

behavioral2

smokeloaderpub6backdoordiscoverytrojan