smokeloader | 900baeb8cc1e8028d5efacefccd12f49648c1937051ed7b4354f438f90109ec4 | Triage

Sharing

General

Target

cfae86322823fc52069c66a01150e94f_JaffaCakes118
Size

233KB
Sample

241206-3zz68a1kbr
MD5

cfae86322823fc52069c66a01150e94f
SHA1

3d2f96ebfec15db57c86842d708407a4c7a1afe3
SHA256

900baeb8cc1e8028d5efacefccd12f49648c1937051ed7b4354f438f90109ec4
SHA512

073d194265b1ae0368caaae2d5147d3b6f8e8787fc25f218d9b5b3c26ac35b1a0335f16e049b2e03f8ba5629e2855cfbdef4386890170c9008186b567d83cc54
SSDEEP

3072:YJgcrd8YwelcG5WLbumswCS89V10dbwUy42I7EKwyCVxgP1h2TouTjcggNC7VT8N:Rcx8YIG52amyS89srJopxY1UoabVAbh

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  cfae86322823fc52069c66a01150e94f_JaffaCakes118
- Size
  
  233KB
- MD5
  
  cfae86322823fc52069c66a01150e94f
- SHA1
  
  3d2f96ebfec15db57c86842d708407a4c7a1afe3
- SHA256
  
  900baeb8cc1e8028d5efacefccd12f49648c1937051ed7b4354f438f90109ec4
- SHA512
  
  073d194265b1ae0368caaae2d5147d3b6f8e8787fc25f218d9b5b3c26ac35b1a0335f16e049b2e03f8ba5629e2855cfbdef4386890170c9008186b567d83cc54
- SSDEEP
  
  3072:YJgcrd8YwelcG5WLbumswCS89V10dbwUy42I7EKwyCVxgP1h2TouTjcggNC7VT8N:Rcx8YIG52amyS89srJopxY1UoabVAbh
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2