smokeloader | dbb1ffb8a8b13b389fd8aff976808226333bc23d8aafc33111b88206f498fcea | Triage

Sharing

General

Target

e8b57e9e156ab02c1457cebbc8f0333f_JaffaCakes118
Size

217KB
Sample

241212-24fspszqcx
MD5

e8b57e9e156ab02c1457cebbc8f0333f
SHA1

1c2d52a55d84472067081a9e5b054f1d0dc7c35d
SHA256

dbb1ffb8a8b13b389fd8aff976808226333bc23d8aafc33111b88206f498fcea
SHA512

c67700539749b8ec3f96d42e8d64505fb9eaaed9a1f572813225e2c1f5de56f2b39eb9419058a0584454a163483ebb051c75887552920ae9f62607c6decd16e7
SSDEEP

3072:G0CRrgZraEceNQ8X0jBnCst5suV7YWn7HwanCNeoBNTfC8IU:zZraAO8X0c5u6W7CIwY8

Score

10^/10

smokeloader pub1 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Targets

- Target
  
  e8b57e9e156ab02c1457cebbc8f0333f_JaffaCakes118
- Size
  
  217KB
- MD5
  
  e8b57e9e156ab02c1457cebbc8f0333f
- SHA1
  
  1c2d52a55d84472067081a9e5b054f1d0dc7c35d
- SHA256
  
  dbb1ffb8a8b13b389fd8aff976808226333bc23d8aafc33111b88206f498fcea
- SHA512
  
  c67700539749b8ec3f96d42e8d64505fb9eaaed9a1f572813225e2c1f5de56f2b39eb9419058a0584454a163483ebb051c75887552920ae9f62607c6decd16e7
- SSDEEP
  
  3072:G0CRrgZraEceNQ8X0jBnCst5suV7YWn7HwanCNeoBNTfC8IU:zZraAO8X0c5u6W7CIwY8
Score

10^/10

smokeloader pub1 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub1backdoortrojan

behavioral2

smokeloaderpub1backdoordiscoverytrojan