smokeloader | deab90a10c3a9460d607dfa39abb6e0a145c0ff4dab034771fb70daecc246792 | Triage

Sharing

General

Target

JaffaCakes118_a98d840de6a243abb682ead20ad410fa
Size

174KB
Sample

250108-yssfkstmfp
MD5

a98d840de6a243abb682ead20ad410fa
SHA1

44bb2feadd102f6acbcf7e05dfe039c7e6315374
SHA256

deab90a10c3a9460d607dfa39abb6e0a145c0ff4dab034771fb70daecc246792
SHA512

0ffb6622453a13559c855d2a83c9482dde5fedf980e8ce6b3877b33b90721048abfbcba342bf9ebe3f0c75a48e417ad0740d278a4aae26cdd4133c83e9c5e618
SSDEEP

3072:E12oiRvrx7KaoXbDv1HFz5EoS9D98aShyuyt54/i3E:voiRTxwLD9XEVx98aCiXE

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  JaffaCakes118_a98d840de6a243abb682ead20ad410fa
- Size
  
  174KB
- MD5
  
  a98d840de6a243abb682ead20ad410fa
- SHA1
  
  44bb2feadd102f6acbcf7e05dfe039c7e6315374
- SHA256
  
  deab90a10c3a9460d607dfa39abb6e0a145c0ff4dab034771fb70daecc246792
- SHA512
  
  0ffb6622453a13559c855d2a83c9482dde5fedf980e8ce6b3877b33b90721048abfbcba342bf9ebe3f0c75a48e417ad0740d278a4aae26cdd4133c83e9c5e618
- SSDEEP
  
  3072:E12oiRvrx7KaoXbDv1HFz5EoS9D98aShyuyt54/i3E:voiRTxwLD9XEVx98aCiXE
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan