smokeloader | 37ca23ade1d7548f36a64727a3e55f8da018af2ee3a8f5573e18081537bc8fdf | Triage

Sharing

General

Target

JaffaCakes118_6dc35af7cf71103ded426100ee4a355f
Size

308KB
Sample

250107-t34jdayqds
MD5

6dc35af7cf71103ded426100ee4a355f
SHA1

a5d88f3af3f9de027277dda28d21598f8fc29c3b
SHA256

37ca23ade1d7548f36a64727a3e55f8da018af2ee3a8f5573e18081537bc8fdf
SHA512

780ce72e6ea67fca4e161e4502b728ea0e5aa9ab9d5359cb36f1e3aa3b574fba266ea5fb01d3b2df203220d61858010e02d52365dbf5256b54e0b664ba85a09b
SSDEEP

3072:004pD7y5Vtq1TfZs7tQjHFqWS2fGLcWnnfPozkX5nQS/9l0S/I8mj7pl3CgGAXVG:lG1TfZ8+FqW1icYfPozKP/9mgIVl3G

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_6dc35af7cf71103ded426100ee4a355f
- Size
  
  308KB
- MD5
  
  6dc35af7cf71103ded426100ee4a355f
- SHA1
  
  a5d88f3af3f9de027277dda28d21598f8fc29c3b
- SHA256
  
  37ca23ade1d7548f36a64727a3e55f8da018af2ee3a8f5573e18081537bc8fdf
- SHA512
  
  780ce72e6ea67fca4e161e4502b728ea0e5aa9ab9d5359cb36f1e3aa3b574fba266ea5fb01d3b2df203220d61858010e02d52365dbf5256b54e0b664ba85a09b
- SSDEEP
  
  3072:004pD7y5Vtq1TfZs7tQjHFqWS2fGLcWnnfPozkX5nQS/9l0S/I8mj7pl3CgGAXVG:lG1TfZ8+FqW1icYfPozKP/9mgIVl3G
Score

10^/10

smokeloader backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoordiscoverytrojan

behavioral2

smokeloaderbackdoordiscoverytrojan