smokeloader | c343d983164eed9615694c3cca990acd7c82c908f04b61005eaeffc0080bf11a | Triage

Sharing

General

Target

JaffaCakes118_a18b856289855086c6208db3507c3351
Size

316KB
Sample

250105-ntgqcssrdz
MD5

a18b856289855086c6208db3507c3351
SHA1

44f46bd5f2507d2c62f66b72f8e224d37ecf7b18
SHA256

c343d983164eed9615694c3cca990acd7c82c908f04b61005eaeffc0080bf11a
SHA512

877c6f4506653cc471a2e7af4245f81367ea7e4b99106ced3daa3817d982039d5d1387bad9990933ae41e292aec15a988b4183e82cdc66ce96d83a502ee80f1f
SSDEEP

6144:jEzOzivF/3w2M0GqCA0y5481BsmqlM1kKd:Q7ZoJA0y54wsmql+

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  JaffaCakes118_a18b856289855086c6208db3507c3351
- Size
  
  316KB
- MD5
  
  a18b856289855086c6208db3507c3351
- SHA1
  
  44f46bd5f2507d2c62f66b72f8e224d37ecf7b18
- SHA256
  
  c343d983164eed9615694c3cca990acd7c82c908f04b61005eaeffc0080bf11a
- SHA512
  
  877c6f4506653cc471a2e7af4245f81367ea7e4b99106ced3daa3817d982039d5d1387bad9990933ae41e292aec15a988b4183e82cdc66ce96d83a502ee80f1f
- SSDEEP
  
  6144:jEzOzivF/3w2M0GqCA0y5481BsmqlM1kKd:Q7ZoJA0y54wsmql+
Score

10^/10

smokeloader pub3 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoordiscoverytrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan