smokeloader | 69a2d550a9ccfd514e3e6edce5feb96b4c45a87916488911de1dd3d6f417b759 | Triage

Sharing

General

Target

JaffaCakes118_69a2d550a9ccfd514e3e6edce5feb96b4c45a87916488911de1dd3d6f417b759
Size

123KB
Sample

241225-rj5k8avlgv
MD5

d3a4717b22cccb67479fd30d5b02175c
SHA1

810eece1c30fbdc4f964e11d7f1c79b4cb1d9f8c
SHA256

69a2d550a9ccfd514e3e6edce5feb96b4c45a87916488911de1dd3d6f417b759
SHA512

27f41aabbecde7b0d9eb0dfc8f682f142f42268f2e6b097006970471249a90c7160ae4cf9f7c765f7ffbf563b6906e582fe57f1af7881f1bf3a1cd3da3891a40
SSDEEP

3072:E0g3iFb1o43epJfvJoBS++0qQVQLf8tomsi0sI:UabF3ennTrLkSmsJh

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  e986e313965665843845f3626b624e691640e721d01f986a7fbfcb7d09a05e0d
- Size
  
  172KB
- MD5
  
  341c835ddab4b6657d12b70fe83001df
- SHA1
  
  8f906107b7eb102567a01867c3481bcce5d1f1b8
- SHA256
  
  e986e313965665843845f3626b624e691640e721d01f986a7fbfcb7d09a05e0d
- SHA512
  
  372e9270a01d2ad1ee04fcfb8aa2471b9e23598fcc68069a43385c69cfaddf03766507b6515fac9350b8f0fd07af797e49201431477ba066d9b4422ffab95380
- SSDEEP
  
  3072:iRXjYp9ib8Puo0fJoBS++0q84FOhrq5OxETWP2CiYQm8FBp:eXje3PefnTAbrMO6Tj2
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan