smokeloader | de9157c0dd1ce54551ac3201eda8241241afc85de60ddf6a125ffa03ff9b5c20 | Triage

Sharing

General

Target

JaffaCakes118_926ad41a2510aea2737d0cce24e30a01
Size

233KB
Sample

250108-h2fkdazjcv
MD5

926ad41a2510aea2737d0cce24e30a01
SHA1

969915c3ae86dd7cf5591e985a2fc45f5c00a04a
SHA256

de9157c0dd1ce54551ac3201eda8241241afc85de60ddf6a125ffa03ff9b5c20
SHA512

b1c25eccc565ab255a29dc0a4a3e68504cd722d1d5773fb8b2af598af745ecc43886dd97d7bf1f9c9eb87b5a120ac78ad3d48871a748c6f9fd24e552280bb8ec
SSDEEP

3072:FGhKSUgxInv9/zRt2aKcyQD6P5yiRMZINT44+CNf4/AWaSkSJu98vd:hgxInv972aKcyd5yiRIINT4CIADG8el

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_926ad41a2510aea2737d0cce24e30a01
- Size
  
  233KB
- MD5
  
  926ad41a2510aea2737d0cce24e30a01
- SHA1
  
  969915c3ae86dd7cf5591e985a2fc45f5c00a04a
- SHA256
  
  de9157c0dd1ce54551ac3201eda8241241afc85de60ddf6a125ffa03ff9b5c20
- SHA512
  
  b1c25eccc565ab255a29dc0a4a3e68504cd722d1d5773fb8b2af598af745ecc43886dd97d7bf1f9c9eb87b5a120ac78ad3d48871a748c6f9fd24e552280bb8ec
- SSDEEP
  
  3072:FGhKSUgxInv9/zRt2aKcyQD6P5yiRMZINT44+CNf4/AWaSkSJu98vd:hgxInv972aKcyd5yiRIINT4CIADG8el
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan