smokeloader | 47a1546eb67dfef52aa43365dfa57f856c60fc90fc3e3e70cc516eaa5ca1108c | Triage

Sharing

General

Target

JaffaCakes118_d9f342dc84c3da6f1acaea0b5058822d
Size

262KB
Sample

250110-d75n8s1jaz
MD5

d9f342dc84c3da6f1acaea0b5058822d
SHA1

eee0e7849aaed829d8c8f25176f5598b3aa43af9
SHA256

47a1546eb67dfef52aa43365dfa57f856c60fc90fc3e3e70cc516eaa5ca1108c
SHA512

c2131de50d2979afca761c42d9692e6abf5582f56cf00db62fef33f80b9c860f99739e3de6d6721f9f4998abada6acbdf3bd92a2749e4596abe967762081ca0b
SSDEEP

6144:2GyQPiy7eksHEkzXqX7tNfVXVHQLIiu8cfo0/pW:2GVPiuplsXwZGEX8cA0/M

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  JaffaCakes118_d9f342dc84c3da6f1acaea0b5058822d
- Size
  
  262KB
- MD5
  
  d9f342dc84c3da6f1acaea0b5058822d
- SHA1
  
  eee0e7849aaed829d8c8f25176f5598b3aa43af9
- SHA256
  
  47a1546eb67dfef52aa43365dfa57f856c60fc90fc3e3e70cc516eaa5ca1108c
- SHA512
  
  c2131de50d2979afca761c42d9692e6abf5582f56cf00db62fef33f80b9c860f99739e3de6d6721f9f4998abada6acbdf3bd92a2749e4596abe967762081ca0b
- SSDEEP
  
  6144:2GyQPiy7eksHEkzXqX7tNfVXVHQLIiu8cfo0/pW:2GVPiuplsXwZGEX8cA0/M
Score

10^/10

smokeloader pub3 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan