Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06-01-2025 04:15
General
-
Target
JaffaCakes118_0ddc511cc4c5be75801f176f9a75e172.exe
-
Size
232KB
-
MD5
0ddc511cc4c5be75801f176f9a75e172
-
SHA1
1f7818f189febe1da594087179c2b31e266ec1e2
-
SHA256
da7c6d4dd48b4567c28dbda09ad8e85523791547648bb8dabfbe496963ca7aea
-
SHA512
ad58df051c7bbbd6d10036d43b8f35d0ec1b79604fb6acc8cc6f4fabb472dad5a367e5befc0412dad0c4e8c78805eb31b49858553da28ee30067bd98faf852cf
-
SSDEEP
6144:zXDBpNzp9mNUaFrQbcqX7tNfVXVHQLIiu8c:zXvNz2QbcwZGEX8c
Malware Config
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family
-
Loads dropped DLL 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_0ddc511cc4c5be75801f176f9a75e172.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_0ddc511cc4c5be75801f176f9a75e172.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
MD5d124f55b9393c976963407dff51ffa79
SHA12c7bbedd79791bfb866898c85b504186db610b5d
SHA256ea1e16247c848c8c171c4cd1fa17bc5a018a1fcb0c0dac25009066b6667b8eef
SHA512278fe3a4b1fbbe700e4f4483b610133e975e36e101455661d5197bd892a68839b9d555499040d200c92aefa9e3819380e395c0cd85d5fc845c6364d128a8cf06
-
Filesize
36KB
-
Filesize
32KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
32KB
-
Filesize
36KB
-
Filesize
43.0MB