smokeloader | da7c6d4dd48b4567c28dbda09ad8e85523791547648bb8dabfbe496963ca7aea | Triage

Sharing

General

Target

JaffaCakes118_0ddc511cc4c5be75801f176f9a75e172
Size

232KB
Sample

250106-evah1ayjen
MD5

0ddc511cc4c5be75801f176f9a75e172
SHA1

1f7818f189febe1da594087179c2b31e266ec1e2
SHA256

da7c6d4dd48b4567c28dbda09ad8e85523791547648bb8dabfbe496963ca7aea
SHA512

ad58df051c7bbbd6d10036d43b8f35d0ec1b79604fb6acc8cc6f4fabb472dad5a367e5befc0412dad0c4e8c78805eb31b49858553da28ee30067bd98faf852cf
SSDEEP

6144:zXDBpNzp9mNUaFrQbcqX7tNfVXVHQLIiu8c:zXvNz2QbcwZGEX8c

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_0ddc511cc4c5be75801f176f9a75e172
- Size
  
  232KB
- MD5
  
  0ddc511cc4c5be75801f176f9a75e172
- SHA1
  
  1f7818f189febe1da594087179c2b31e266ec1e2
- SHA256
  
  da7c6d4dd48b4567c28dbda09ad8e85523791547648bb8dabfbe496963ca7aea
- SHA512
  
  ad58df051c7bbbd6d10036d43b8f35d0ec1b79604fb6acc8cc6f4fabb472dad5a367e5befc0412dad0c4e8c78805eb31b49858553da28ee30067bd98faf852cf
- SSDEEP
  
  6144:zXDBpNzp9mNUaFrQbcqX7tNfVXVHQLIiu8c:zXvNz2QbcwZGEX8c
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan