smokeloader | b1d0d50f6e59811b2985ddbedbaed3813f5f3b1e81d4c4e3a517b76ac0a53ce8 | Triage

Sharing

General

Target

JaffaCakes118_b1d0d50f6e59811b2985ddbedbaed3813f5f3b1e81d4c4e3a517b76ac0a53ce8
Size

40KB
Sample

241224-clz17ayqgm
MD5

112f0d958cadae441b1b1624e270ce38
SHA1

c3823572821f717fd6a9537febb66ad566b2081a
SHA256

b1d0d50f6e59811b2985ddbedbaed3813f5f3b1e81d4c4e3a517b76ac0a53ce8
SHA512

f444d911b5547e53b953e6500cf81986023667878aef3f787fa7642f211ace315901c1de8c4ef6df4a199e4878c92f2fe45bdb1cacfee2c658c39e4505467e83
SSDEEP

768:ZuzaiwVB6+6rpieqlNETGstI7bfrYbzIUV61GRIwY2eZ5/FQ2f:ZumlBR6F7qETGbbfs56YIwDeZ5/ff

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_b1d0d50f6e59811b2985ddbedbaed3813f5f3b1e81d4c4e3a517b76ac0a53ce8
- Size
  
  40KB
- MD5
  
  112f0d958cadae441b1b1624e270ce38
- SHA1
  
  c3823572821f717fd6a9537febb66ad566b2081a
- SHA256
  
  b1d0d50f6e59811b2985ddbedbaed3813f5f3b1e81d4c4e3a517b76ac0a53ce8
- SHA512
  
  f444d911b5547e53b953e6500cf81986023667878aef3f787fa7642f211ace315901c1de8c4ef6df4a199e4878c92f2fe45bdb1cacfee2c658c39e4505467e83
- SSDEEP
  
  768:ZuzaiwVB6+6rpieqlNETGstI7bfrYbzIUV61GRIwY2eZ5/FQ2f:ZumlBR6F7qETGbbfs56YIwDeZ5/ff
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan