Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
09-01-2025 06:43
General
-
Target
JaffaCakes118_c17f0b1928c828c230a0b19fd35c697c.exe
-
Size
232KB
-
MD5
c17f0b1928c828c230a0b19fd35c697c
-
SHA1
a385ccadd92245a14b84a4aaadf86e248fad36c6
-
SHA256
baba8ac58643423b28beeacf8d5dac76bf7c768b2c2dbf61ed6867c139052f90
-
SHA512
44c14f5ce29cfc9f8052e7932106c50d65118cd23e9fdd816fba551cfb206479d3c966af7a01565086c630da2ef48758cacd00815d134a6db5a9f2858eea27eb
-
SSDEEP
3072:YGB6tEhjUnUUWUaUI4gu04jgo5lr7ia+edhLeb+CNf4/AWaSkSJu98vd:DhjUnUURaQ04jZD7iOq7IADG8el
Malware Config
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family
-
Loads dropped DLL 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c17f0b1928c828c230a0b19fd35c697c.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c17f0b1928c828c230a0b19fd35c697c.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
MD5d124f55b9393c976963407dff51ffa79
SHA12c7bbedd79791bfb866898c85b504186db610b5d
SHA256ea1e16247c848c8c171c4cd1fa17bc5a018a1fcb0c0dac25009066b6667b8eef
SHA512278fe3a4b1fbbe700e4f4483b610133e975e36e101455661d5197bd892a68839b9d555499040d200c92aefa9e3819380e395c0cd85d5fc845c6364d128a8cf06
-
Filesize
36KB
-
Filesize
32KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
32KB
-
Filesize
36KB
-
Filesize
43.0MB