smokeloader | 4968bc86855058e4ce9cbace83fb9f5f23607b868730e54fc26a4070ce7fdbb5 | Triage

Sharing

General

Target

JaffaCakes118_6619cb673bf96428f23b9c4cb7251c15
Size

284KB
Sample

250107-qygx2avqbk
MD5

6619cb673bf96428f23b9c4cb7251c15
SHA1

9fea56ce88840bea1d12bfb0d67548cc3fbbb9db
SHA256

4968bc86855058e4ce9cbace83fb9f5f23607b868730e54fc26a4070ce7fdbb5
SHA512

ba280c48ed489a197d2971bc0bc56352f8daa0e7fc7b73c8954b078ff03123e89be51231b6dc0bcc1a0f5bb04a519571b687b35bfc6ff23afd5b86eac7c41908
SSDEEP

6144:hnDiF7VI0x8zGxCJAVPvZDoVlpXU30IaEhROg9b:ZDkO0042IvhuXuLaEhpb

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_6619cb673bf96428f23b9c4cb7251c15
- Size
  
  284KB
- MD5
  
  6619cb673bf96428f23b9c4cb7251c15
- SHA1
  
  9fea56ce88840bea1d12bfb0d67548cc3fbbb9db
- SHA256
  
  4968bc86855058e4ce9cbace83fb9f5f23607b868730e54fc26a4070ce7fdbb5
- SHA512
  
  ba280c48ed489a197d2971bc0bc56352f8daa0e7fc7b73c8954b078ff03123e89be51231b6dc0bcc1a0f5bb04a519571b687b35bfc6ff23afd5b86eac7c41908
- SSDEEP
  
  6144:hnDiF7VI0x8zGxCJAVPvZDoVlpXU30IaEhROg9b:ZDkO0042IvhuXuLaEhpb
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan