smokeloader | af56b839e1278d8ea3f031bfc6bca26b82e60f3f0fbe8fc89d9d292c06d642ef | Triage

Sharing

General

Target

JaffaCakes118_5d679e4828b502f2da6e536aee9a1f55
Size

345KB
Sample

250107-md8ngaynbp
MD5

5d679e4828b502f2da6e536aee9a1f55
SHA1

3a6a2bc1e9c6c258962201575de5f0c72c3bb137
SHA256

af56b839e1278d8ea3f031bfc6bca26b82e60f3f0fbe8fc89d9d292c06d642ef
SHA512

1630ca3c445606021cc7ecfb84d6ff2ba347d9bede270538603137bda98a71cdae69531555a60af2e558ca9eecd60bdbcaa98bb6f9b98e3430438727e5f7d35f
SSDEEP

6144:Fjk0clravhZiusvpfy9j0yKHq/bV6bb6ftDSSRbsNe6qx4f1JZYT:FI0IsbeQj0CDwP6VDSSRgGx4dJS

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_5d679e4828b502f2da6e536aee9a1f55
- Size
  
  345KB
- MD5
  
  5d679e4828b502f2da6e536aee9a1f55
- SHA1
  
  3a6a2bc1e9c6c258962201575de5f0c72c3bb137
- SHA256
  
  af56b839e1278d8ea3f031bfc6bca26b82e60f3f0fbe8fc89d9d292c06d642ef
- SHA512
  
  1630ca3c445606021cc7ecfb84d6ff2ba347d9bede270538603137bda98a71cdae69531555a60af2e558ca9eecd60bdbcaa98bb6f9b98e3430438727e5f7d35f
- SSDEEP
  
  6144:Fjk0clravhZiusvpfy9j0yKHq/bV6bb6ftDSSRbsNe6qx4f1JZYT:FI0IsbeQj0CDwP6VDSSRgGx4dJS
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan