smokeloader | 83ea194c881a81eb285714a78ac2148f82b2f370435acc982902356bd06d3e13 | Triage

Sharing

General

Target

JaffaCakes118_557d0e804053f7b0d95c2c19574d3bcb
Size

233KB
Sample

250107-jakwfszrfz
MD5

557d0e804053f7b0d95c2c19574d3bcb
SHA1

5ac627499794af845fb8e88550b27b81a2d0fa35
SHA256

83ea194c881a81eb285714a78ac2148f82b2f370435acc982902356bd06d3e13
SHA512

a5cbdaac7955539c51500d2b52710b485084be8c994dfb9c59a86c77c8b49b1cc319c1f7082fe081ebcb52fcc63047e9247a1f52795387217a363c78037dbb98
SSDEEP

3072:JGhKikQxIHv9OlnJe6rJsx6+32YSZG6P5VisE/xdqwXIe+CNf4/AWaSkSJu98vd:VQxIHv9Ox0M5z5VisiYUIADG8el

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  JaffaCakes118_557d0e804053f7b0d95c2c19574d3bcb
- Size
  
  233KB
- MD5
  
  557d0e804053f7b0d95c2c19574d3bcb
- SHA1
  
  5ac627499794af845fb8e88550b27b81a2d0fa35
- SHA256
  
  83ea194c881a81eb285714a78ac2148f82b2f370435acc982902356bd06d3e13
- SHA512
  
  a5cbdaac7955539c51500d2b52710b485084be8c994dfb9c59a86c77c8b49b1cc319c1f7082fe081ebcb52fcc63047e9247a1f52795387217a363c78037dbb98
- SSDEEP
  
  3072:JGhKikQxIHv9OlnJe6rJsx6+32YSZG6P5VisE/xdqwXIe+CNf4/AWaSkSJu98vd:VQxIHv9Ox0M5z5VisiYUIADG8el
Score

10^/10

smokeloader pub5 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoortrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan