smokeloader | 8b7dde2273a65466be71afee907a6d3739f24ce9cb0a91920b08d5659bcee075 | Triage

Sharing

General

Target

JaffaCakes118_82b8574fd63cde3fac977145f75836f9
Size

240KB
Sample

250108-bgjyqsxkgy
MD5

82b8574fd63cde3fac977145f75836f9
SHA1

58a38b7a75e1dd59932ac470f0fa889ed5b65c2a
SHA256

8b7dde2273a65466be71afee907a6d3739f24ce9cb0a91920b08d5659bcee075
SHA512

80782b230671030929dd012d3f9d0c22432c642f25f58f566e936a49fc640c01e08779247f7b290b127748f45337a846aed6027b0177911fabdd22087aea1f77
SSDEEP

6144:QeccjFeYJ6N/sLsueihb12PYxVj/ClQVSHO1UY:QHcx/J6N8SYnmlQVSHk

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  JaffaCakes118_82b8574fd63cde3fac977145f75836f9
- Size
  
  240KB
- MD5
  
  82b8574fd63cde3fac977145f75836f9
- SHA1
  
  58a38b7a75e1dd59932ac470f0fa889ed5b65c2a
- SHA256
  
  8b7dde2273a65466be71afee907a6d3739f24ce9cb0a91920b08d5659bcee075
- SHA512
  
  80782b230671030929dd012d3f9d0c22432c642f25f58f566e936a49fc640c01e08779247f7b290b127748f45337a846aed6027b0177911fabdd22087aea1f77
- SSDEEP
  
  6144:QeccjFeYJ6N/sLsueihb12PYxVj/ClQVSHO1UY:QHcx/J6N8SYnmlQVSHk
Score

10^/10

smokeloader pub5 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoortrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan