smokeloader | 50e7d16299362dd6f01767baae907a901c422d2f606440bd2af06dbced503e36 | Triage

Sharing

General

Target

JaffaCakes118_cee572590c5d79b52568087e62f77ba5
Size

144KB
Sample

250109-wxswssypfr
MD5

cee572590c5d79b52568087e62f77ba5
SHA1

5a12b76ed764873e2e181dc7cae9e3a28f153412
SHA256

50e7d16299362dd6f01767baae907a901c422d2f606440bd2af06dbced503e36
SHA512

9fd3b48627952d5bb15c0949c4182be5816f496032314e569e576b4bff341ea72394e423ac34bd2140c4468b4ea54ebeba1b2f445ce88382feba3e6cbef9b6e5
SSDEEP

3072:tACY7QMEpchKEw1/fJzzRJh25AwhF8/Zy5LFz:twFhKP5Jzz0/Wy5xz

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  JaffaCakes118_cee572590c5d79b52568087e62f77ba5
- Size
  
  144KB
- MD5
  
  cee572590c5d79b52568087e62f77ba5
- SHA1
  
  5a12b76ed764873e2e181dc7cae9e3a28f153412
- SHA256
  
  50e7d16299362dd6f01767baae907a901c422d2f606440bd2af06dbced503e36
- SHA512
  
  9fd3b48627952d5bb15c0949c4182be5816f496032314e569e576b4bff341ea72394e423ac34bd2140c4468b4ea54ebeba1b2f445ce88382feba3e6cbef9b6e5
- SSDEEP
  
  3072:tACY7QMEpchKEw1/fJzzRJh25AwhF8/Zy5LFz:twFhKP5Jzz0/Wy5xz
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan