smokeloader | 1a994d8cb9311cef68929f5cf734a2a11e61ec1b5d75889aee133f3115ef717f | Triage

Sharing

General

Target

JaffaCakes118_a5d4b317a8edcd9a4da6a184f5471fba
Size

284KB
Sample

250108-xfv59symez
MD5

a5d4b317a8edcd9a4da6a184f5471fba
SHA1

69d48a9901c9b40ac6a8650d4767ce60b31cd4e5
SHA256

1a994d8cb9311cef68929f5cf734a2a11e61ec1b5d75889aee133f3115ef717f
SHA512

4bc212ad307633a80be7734b230264df9e0274a995eec813b33732dae79c5264a15db10816adb15ebb0abfcba51218cd39907bcb9bfd99309bdc349b61a92603
SSDEEP

6144:Wtn6gOmAo1Hq8OA77VjcjgpKH5vRGRksqlv7z6bPPWow09LXdU91A8G:a6QrZq8D77ZcjNHLg52vn6WdSLXdx

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  JaffaCakes118_a5d4b317a8edcd9a4da6a184f5471fba
- Size
  
  284KB
- MD5
  
  a5d4b317a8edcd9a4da6a184f5471fba
- SHA1
  
  69d48a9901c9b40ac6a8650d4767ce60b31cd4e5
- SHA256
  
  1a994d8cb9311cef68929f5cf734a2a11e61ec1b5d75889aee133f3115ef717f
- SHA512
  
  4bc212ad307633a80be7734b230264df9e0274a995eec813b33732dae79c5264a15db10816adb15ebb0abfcba51218cd39907bcb9bfd99309bdc349b61a92603
- SSDEEP
  
  6144:Wtn6gOmAo1Hq8OA77VjcjgpKH5vRGRksqlv7z6bPPWow09LXdU91A8G:a6QrZq8D77ZcjNHLg52vn6WdSLXdx
Score

10^/10

smokeloader pub5 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoordiscoverytrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan