smokeloader | c6f145f40bfd047eb2430ece58ae9ee5d8675ba7cdff685f6b487d9d2d056dd0 | Triage

Sharing

General

Target

JaffaCakes118_c6f145f40bfd047eb2430ece58ae9ee5d8675ba7cdff685f6b487d9d2d056dd0
Size

127KB
Sample

241225-zrmpdaxpfm
MD5

8df42380699ecddaf2f29280299f967a
SHA1

d1f1a8efee1c50481740d7936d679d030a3c38a4
SHA256

c6f145f40bfd047eb2430ece58ae9ee5d8675ba7cdff685f6b487d9d2d056dd0
SHA512

2b810f468e2be96381da9cfd7a364de32ddf406a40fc011cf01feaaecccd528cbf7cdb8a8dab2037275eda3327be710e3ab091c356fdadaa3c88c303ac42e1aa
SSDEEP

3072:lXUMNgIod75MLi9iTB5CiN9E2a8ToTeTWxc:rNk75aJQaSc

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  80c8c74132ba4a5f2f905ac779f8dedf4688a2267288a8cb5fa544fe7c8b2830
- Size
  
  181KB
- MD5
  
  fc606e3992280d15475c057beb77329c
- SHA1
  
  529f466af3420422ef145f0dd78292d7190a7da3
- SHA256
  
  80c8c74132ba4a5f2f905ac779f8dedf4688a2267288a8cb5fa544fe7c8b2830
- SHA512
  
  ca243eed24d0c7bd1a60bad7988bf380189ef037b9be2f3fa325c03190ee146737fdc4638b5bd0717a7727b7cf4df39419e73581402d1edcfbb14ec300db5278
- SSDEEP
  
  3072:j0khAaHM1yE/MkMd75MLi9cqUSjfzHHrwJVtZIkxwu14Z4hd+Ji8X1lY:jAIM1F9S75avSjfzkxZIEWZ4hSi8l
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan