smokeloader | b2bcf679e7fc77e8a68ba1150a4e201450b921ead9aa011dbbaf846a2f9eaa10 | Triage

Sharing

General

Target

JaffaCakes118_bb755de2c68699bf2f0935408f20dbf5
Size

232KB
Sample

250109-d3a9tsypgm
MD5

bb755de2c68699bf2f0935408f20dbf5
SHA1

c7a536e73ba8a913797aef7e1dd0331e6ebb10d9
SHA256

b2bcf679e7fc77e8a68ba1150a4e201450b921ead9aa011dbbaf846a2f9eaa10
SHA512

7ec330306c8ed4d0b206d3cbcc944bf2b9d1ca1e706acdad1fe58c2d05949e446ac83b4cd9877aa1aa2ac346bdd9a1d9ecdfe827a765093a2bef0513f2aee1b8
SSDEEP

6144:ngxInv9KvT3MOO3mH5diTCKgaIADG8el:nGInlYiTCmxD

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_bb755de2c68699bf2f0935408f20dbf5
- Size
  
  232KB
- MD5
  
  bb755de2c68699bf2f0935408f20dbf5
- SHA1
  
  c7a536e73ba8a913797aef7e1dd0331e6ebb10d9
- SHA256
  
  b2bcf679e7fc77e8a68ba1150a4e201450b921ead9aa011dbbaf846a2f9eaa10
- SHA512
  
  7ec330306c8ed4d0b206d3cbcc944bf2b9d1ca1e706acdad1fe58c2d05949e446ac83b4cd9877aa1aa2ac346bdd9a1d9ecdfe827a765093a2bef0513f2aee1b8
- SSDEEP
  
  6144:ngxInv9KvT3MOO3mH5diTCKgaIADG8el:nGInlYiTCmxD
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan