smokeloader | 89a0227ef833a2742f7dd46be36e61b178a8b47846fd3cf557c8b9991b7cfb67 | Triage

Sharing

General

Target

JaffaCakes118_55bf2bbdd87ec3ac709c6a247f4a28b4
Size

29KB
Sample

250101-p15ansvmhy
MD5

55bf2bbdd87ec3ac709c6a247f4a28b4
SHA1

6df7d9af3a7b2da1c91aff955a4c5aadbe2d13cb
SHA256

89a0227ef833a2742f7dd46be36e61b178a8b47846fd3cf557c8b9991b7cfb67
SHA512

dcaa8ab6b31105a3ec82454008cd4835a1728ccb6fceee8ae89ce4198a0555a72ed9345a6acb0d9c80dcaa40608483f13bb35a255e832e01a6ea1bd463439aa2
SSDEEP

768:BAGygotBbsWyj5bVotP1DbUBLnW3xLfflPi5wiw:BAGnsbq1bkP1DbUl0FD1

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  JaffaCakes118_55bf2bbdd87ec3ac709c6a247f4a28b4
- Size
  
  29KB
- MD5
  
  55bf2bbdd87ec3ac709c6a247f4a28b4
- SHA1
  
  6df7d9af3a7b2da1c91aff955a4c5aadbe2d13cb
- SHA256
  
  89a0227ef833a2742f7dd46be36e61b178a8b47846fd3cf557c8b9991b7cfb67
- SHA512
  
  dcaa8ab6b31105a3ec82454008cd4835a1728ccb6fceee8ae89ce4198a0555a72ed9345a6acb0d9c80dcaa40608483f13bb35a255e832e01a6ea1bd463439aa2
- SSDEEP
  
  768:BAGygotBbsWyj5bVotP1DbUBLnW3xLfflPi5wiw:BAGnsbq1bkP1DbUl0FD1
Score

10^/10

smokeloader pub5 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoortrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan