smokeloader | d606c5142f93f5d223c004870e3bb239c3b522dc6f874226913653f5d3211d63 | Triage

Sharing

General

Target

JaffaCakes118_322c22e8bc5a3b1595780325651fe491
Size

332KB
Sample

241231-yah47axrdj
MD5

322c22e8bc5a3b1595780325651fe491
SHA1

e3c2327a57612929b144419df63b4dbab915b4e6
SHA256

d606c5142f93f5d223c004870e3bb239c3b522dc6f874226913653f5d3211d63
SHA512

e6c9ed118319f030182bf54b63c03086196f174307c55c4fa11069915818d2173f62e114b56ee22b68fd3b9d82c08e59a1a9342daef5e2a118fe73beb6445bd6
SSDEEP

6144:cMdJCXCOXi1mUgkXCTOEyx6d1W8jlnzjfZWP9vyFSFWA7uD9jQ:cYCAfXCCEyxe1jlzjfZGvkS1S

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  JaffaCakes118_322c22e8bc5a3b1595780325651fe491
- Size
  
  332KB
- MD5
  
  322c22e8bc5a3b1595780325651fe491
- SHA1
  
  e3c2327a57612929b144419df63b4dbab915b4e6
- SHA256
  
  d606c5142f93f5d223c004870e3bb239c3b522dc6f874226913653f5d3211d63
- SHA512
  
  e6c9ed118319f030182bf54b63c03086196f174307c55c4fa11069915818d2173f62e114b56ee22b68fd3b9d82c08e59a1a9342daef5e2a118fe73beb6445bd6
- SSDEEP
  
  6144:cMdJCXCOXi1mUgkXCTOEyx6d1W8jlnzjfZWP9vyFSFWA7uD9jQ:cYCAfXCCEyxe1jlzjfZGvkS1S
Score

10^/10

smokeloader pub5 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoordiscoverytrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan