smokeloader | 736b919068232acf7aae67e3ca5e915c89faade4110b31ff75c249ade1991ef6 | Triage

Sharing

General

Target

JaffaCakes118_69d766e919d6f40d9e409c5b1074c0c7
Size

233KB
Sample

250107-sglk1awlhz
MD5

69d766e919d6f40d9e409c5b1074c0c7
SHA1

d02f4bb52c600d9e90ee421c7ac0c3b79769d25b
SHA256

736b919068232acf7aae67e3ca5e915c89faade4110b31ff75c249ade1991ef6
SHA512

2c1cfdff9569bf5e52a884505fd6d5e1acdf13d1cf719dbb24c5dcbaa43d2b3f36b17a0a06e517983da18a881f47da6d678019b4b1e032ff6b331ebca17ccd16
SSDEEP

3072:CGxKfv13pi/kerZWvKC1/qz/iDkQ+efBriC+CNf4/AWaSkSJu98vd:wv13piMCZWvKCo/iD9ri4IADG8el

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_69d766e919d6f40d9e409c5b1074c0c7
- Size
  
  233KB
- MD5
  
  69d766e919d6f40d9e409c5b1074c0c7
- SHA1
  
  d02f4bb52c600d9e90ee421c7ac0c3b79769d25b
- SHA256
  
  736b919068232acf7aae67e3ca5e915c89faade4110b31ff75c249ade1991ef6
- SHA512
  
  2c1cfdff9569bf5e52a884505fd6d5e1acdf13d1cf719dbb24c5dcbaa43d2b3f36b17a0a06e517983da18a881f47da6d678019b4b1e032ff6b331ebca17ccd16
- SSDEEP
  
  3072:CGxKfv13pi/kerZWvKC1/qz/iDkQ+efBriC+CNf4/AWaSkSJu98vd:wv13piMCZWvKCo/iD9ri4IADG8el
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan