smokeloader | 66ae87cb749dbe0c3de08ab07a49b0303460caab4b75d8a1005b50dbed869dce | Triage

Sharing

General

Target

JaffaCakes118_7e3669b95cf566dcda6c907da6181eb2
Size

232KB
Sample

250107-25bv5ssrav
MD5

7e3669b95cf566dcda6c907da6181eb2
SHA1

25646c53193ac627b17359a796a5606db33a9db6
SHA256

66ae87cb749dbe0c3de08ab07a49b0303460caab4b75d8a1005b50dbed869dce
SHA512

5365cf12e82e533cc29a9b5428d247633f08c24929d36ef12f640510f7dca3600a07aa6c1bfbde0c51f531980797b931d5bb39f23119d5c3326fbe95f194e981
SSDEEP

3072:5GB6tEhjUnUUsADEKXVILyQH/xlrFixC9OJrw+CNf4/AWaSkSJu98vdb:mhjUnUU02QfLFi0VIADG8elb

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_7e3669b95cf566dcda6c907da6181eb2
- Size
  
  232KB
- MD5
  
  7e3669b95cf566dcda6c907da6181eb2
- SHA1
  
  25646c53193ac627b17359a796a5606db33a9db6
- SHA256
  
  66ae87cb749dbe0c3de08ab07a49b0303460caab4b75d8a1005b50dbed869dce
- SHA512
  
  5365cf12e82e533cc29a9b5428d247633f08c24929d36ef12f640510f7dca3600a07aa6c1bfbde0c51f531980797b931d5bb39f23119d5c3326fbe95f194e981
- SSDEEP
  
  3072:5GB6tEhjUnUUsADEKXVILyQH/xlrFixC9OJrw+CNf4/AWaSkSJu98vdb:mhjUnUU02QfLFi0VIADG8elb
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan