smokeloader | baba8ac58643423b28beeacf8d5dac76bf7c768b2c2dbf61ed6867c139052f90 | Triage

Sharing

General

Target

JaffaCakes118_c17f0b1928c828c230a0b19fd35c697c
Size

232KB
Sample

250109-hg989askh1
MD5

c17f0b1928c828c230a0b19fd35c697c
SHA1

a385ccadd92245a14b84a4aaadf86e248fad36c6
SHA256

baba8ac58643423b28beeacf8d5dac76bf7c768b2c2dbf61ed6867c139052f90
SHA512

44c14f5ce29cfc9f8052e7932106c50d65118cd23e9fdd816fba551cfb206479d3c966af7a01565086c630da2ef48758cacd00815d134a6db5a9f2858eea27eb
SSDEEP

3072:YGB6tEhjUnUUWUaUI4gu04jgo5lr7ia+edhLeb+CNf4/AWaSkSJu98vd:DhjUnUURaQ04jZD7iOq7IADG8el

Score

10^/10

smokeloader backdoor discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_c17f0b1928c828c230a0b19fd35c697c
- Size
  
  232KB
- MD5
  
  c17f0b1928c828c230a0b19fd35c697c
- SHA1
  
  a385ccadd92245a14b84a4aaadf86e248fad36c6
- SHA256
  
  baba8ac58643423b28beeacf8d5dac76bf7c768b2c2dbf61ed6867c139052f90
- SHA512
  
  44c14f5ce29cfc9f8052e7932106c50d65118cd23e9fdd816fba551cfb206479d3c966af7a01565086c630da2ef48758cacd00815d134a6db5a9f2858eea27eb
- SSDEEP
  
  3072:YGB6tEhjUnUUWUaUI4gu04jgo5lr7ia+edhLeb+CNf4/AWaSkSJu98vd:DhjUnUURaQ04jZD7iOq7IADG8el
Score

10^/10

smokeloader backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderbackdoortrojan

behavioral2

smokeloaderbackdoordiscoverytrojan