smokeloader | 8b9fcf28d37497bdc2a20529aa09f2d94d2cb7de8c2a3add83e83bde4019070b | Triage

Sharing

General

Target

JaffaCakes118_d988cbabb48281eff0a39ce40631a5f9
Size

127KB
Sample

250110-dtq9paznc1
MD5

d988cbabb48281eff0a39ce40631a5f9
SHA1

1ea1ad897a8e9f46de7944ff8c51776ca891dd0c
SHA256

8b9fcf28d37497bdc2a20529aa09f2d94d2cb7de8c2a3add83e83bde4019070b
SHA512

4925ed79cf418b2234846d40ae31814b6bb0c1a1cf7451b052b9d4d31a9d025529cf4d63802809787f804cbc5a64fa2c833dc26f710db337a2c842c3bfd8ec3c
SSDEEP

1536:/dYrLqjif7PpYbxv8jryIAyFcRtcORUknh3uJp+Q7Jgz70HFcZeA1z:/SvqjSlSsroy+RtcORUk9qfPHeZn1z

Score

10^/10

smokeloader pub2 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Targets

- Target
  
  JaffaCakes118_d988cbabb48281eff0a39ce40631a5f9
- Size
  
  127KB
- MD5
  
  d988cbabb48281eff0a39ce40631a5f9
- SHA1
  
  1ea1ad897a8e9f46de7944ff8c51776ca891dd0c
- SHA256
  
  8b9fcf28d37497bdc2a20529aa09f2d94d2cb7de8c2a3add83e83bde4019070b
- SHA512
  
  4925ed79cf418b2234846d40ae31814b6bb0c1a1cf7451b052b9d4d31a9d025529cf4d63802809787f804cbc5a64fa2c833dc26f710db337a2c842c3bfd8ec3c
- SSDEEP
  
  1536:/dYrLqjif7PpYbxv8jryIAyFcRtcORUknh3uJp+Q7Jgz70HFcZeA1z:/SvqjSlSsroy+RtcORUk9qfPHeZn1z
Score

10^/10

smokeloader pub2 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub2backdoortrojan

behavioral2

smokeloaderpub2backdoordiscoverytrojan