smokeloader | 557e0a9b0fd9c188589502ef21bea156733ad1bfead7551939e03b4412e2688d | Triage

Sharing

General

Target

JaffaCakes118_f762e5f3316af686ea906f77787e9a1d
Size

232KB
Sample

250111-fext2avkgt
MD5

f762e5f3316af686ea906f77787e9a1d
SHA1

09e60c8af577d5753121254663b85bbb7dfc638f
SHA256

557e0a9b0fd9c188589502ef21bea156733ad1bfead7551939e03b4412e2688d
SHA512

e49f1fdb55dbf9aec94ac581746adcd74ae99ee3698a49c377b8d7c2016662c90b89e3d8bb5494e7e5a95d073c35b4829fdc6cb896645de15488bcabb46f4a33
SSDEEP

6144:sXDBpNz1EJX7trLqX7tNfVXVHQLIiu8c:sXvNz1ixLwZGEX8c

Score

10^/10

smokeloader pub5 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Targets

- Target
  
  JaffaCakes118_f762e5f3316af686ea906f77787e9a1d
- Size
  
  232KB
- MD5
  
  f762e5f3316af686ea906f77787e9a1d
- SHA1
  
  09e60c8af577d5753121254663b85bbb7dfc638f
- SHA256
  
  557e0a9b0fd9c188589502ef21bea156733ad1bfead7551939e03b4412e2688d
- SHA512
  
  e49f1fdb55dbf9aec94ac581746adcd74ae99ee3698a49c377b8d7c2016662c90b89e3d8bb5494e7e5a95d073c35b4829fdc6cb896645de15488bcabb46f4a33
- SSDEEP
  
  6144:sXDBpNz1EJX7trLqX7tNfVXVHQLIiu8c:sXvNz1ixLwZGEX8c
Score

10^/10

smokeloader pub5 backdoor trojan discovery
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub5backdoortrojan

behavioral2

smokeloaderpub5backdoordiscoverytrojan