smokeloader | 0c122cc3c771c389170d4b76a4d4400e881b4f6065ac88bf3bd1d01565f81773 | Triage

Sharing

General

Target

JaffaCakes118_0ca1532d75d71f98b5d610ebb9d5a2cc
Size

144KB
Sample

250106-edk86svpfs
MD5

0ca1532d75d71f98b5d610ebb9d5a2cc
SHA1

eb4dd79e74066d30a8dda6fe1628779672205f3d
SHA256

0c122cc3c771c389170d4b76a4d4400e881b4f6065ac88bf3bd1d01565f81773
SHA512

c8ff1d3a3580f7c7bb15d77b350023f1c7fc0e3d56276080a5c9cffe3bfd8d46f70ce61473b9550217d3fd3a4591cce88bcc06b79673144b9d7d6fec8bd9848b
SSDEEP

1536:Uk0JAbV7srPwPhk28mcL4Y/PKOMarYXUIflChgBM1qjl0O8sYc5WOmQjxkxKI:UnuxaQ8/tHhIfl0gi1I0MYc5W8

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  JaffaCakes118_0ca1532d75d71f98b5d610ebb9d5a2cc
- Size
  
  144KB
- MD5
  
  0ca1532d75d71f98b5d610ebb9d5a2cc
- SHA1
  
  eb4dd79e74066d30a8dda6fe1628779672205f3d
- SHA256
  
  0c122cc3c771c389170d4b76a4d4400e881b4f6065ac88bf3bd1d01565f81773
- SHA512
  
  c8ff1d3a3580f7c7bb15d77b350023f1c7fc0e3d56276080a5c9cffe3bfd8d46f70ce61473b9550217d3fd3a4591cce88bcc06b79673144b9d7d6fec8bd9848b
- SSDEEP
  
  1536:Uk0JAbV7srPwPhk28mcL4Y/PKOMarYXUIflChgBM1qjl0O8sYc5WOmQjxkxKI:UnuxaQ8/tHhIfl0gi1I0MYc5W8
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan