smokeloader | 50ee3d54b4b9028bf7b30ca565c8773a9251ab6e14534cdf397f14335fb743c7 | Triage

Sharing

General

Target

JaffaCakes118_50ee3d54b4b9028bf7b30ca565c8773a9251ab6e14534cdf397f14335fb743c7
Size

123KB
Sample

241225-f6c9psypet
MD5

ac8f00325c5e0fa398e223902b514b82
SHA1

64ce133e5a515c844306cca8a8dfe05d72970204
SHA256

50ee3d54b4b9028bf7b30ca565c8773a9251ab6e14534cdf397f14335fb743c7
SHA512

ef0572e22777a7c7e732f7dd32a9c6f4c30b0ac474de45cb01ada733d45618b39590b1b2100ad641b8e11787a52a3adddb4f1acd52971a2ca81732ae446e3ece
SSDEEP

3072:uad4uPu/b1WXl0PT5kHrJN9uY10mDI/T5rvpDehBUkhgAzMz8t:fdh2/5WV0PdkH1u6Jc1rvUlW1z8t

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  2a1ecc36a5ac120dae2bfe076783af5fb5e3b36a652f929e6e13c7bbad4e825b
- Size
  
  172KB
- MD5
  
  c7d8bf56143da36af9a48c8009d2c778
- SHA1
  
  1f6a8fdf4bcf7b30259d1ac58e5047d14430c0f0
- SHA256
  
  2a1ecc36a5ac120dae2bfe076783af5fb5e3b36a652f929e6e13c7bbad4e825b
- SHA512
  
  63842cc3a768dea452f4806b0b567950f3933c4246f71c492c87aebf6d550d376aac80737a9ee24335283f5a72c0de29ca9f26fd8006281797ece71853dfb075
- SSDEEP
  
  3072:dIERwqpe9sJ6hf0PT5kHrJN9uAP2rwiZ/LrxkHDCFV+SJeoJty8Mgbzs9p:qEFEsUR0PdkH1uAPilnaHOyS8oJ+
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan