smokeloader | b3eb8aac4711af84e9f21fb397e0925f2296d5fd7b32bec3f26369fa022e42fa | Triage

Sharing

General

Target

JaffaCakes118_fdbd7ce5f82d2850a7ead17b4f131ae9
Size

289KB
Sample

250111-lp3e6axphr
MD5

fdbd7ce5f82d2850a7ead17b4f131ae9
SHA1

0e78bb6d33bacb75afd7b6d29d7d48d106b27659
SHA256

b3eb8aac4711af84e9f21fb397e0925f2296d5fd7b32bec3f26369fa022e42fa
SHA512

aaaa71429c6ca987f74659018651038b89255c1d1b99f885376e4afc4f9e6cc0726a6e4ddf1363a9aa874b31bb82b4b15c39b1df95b3a97990a824dadfcaa84d
SSDEEP

3072:Lu03SLyowCLiDUFVxTp7KHl7dtJagFaXc5ipoBHIPnk1226GTvszpzuV9MwVZG3d:IOYrVklZvagfJBHIPnUJ6GMFuTHG3d

Score

10^/10

smokeloader pub3 backdoor discovery trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  JaffaCakes118_fdbd7ce5f82d2850a7ead17b4f131ae9
- Size
  
  289KB
- MD5
  
  fdbd7ce5f82d2850a7ead17b4f131ae9
- SHA1
  
  0e78bb6d33bacb75afd7b6d29d7d48d106b27659
- SHA256
  
  b3eb8aac4711af84e9f21fb397e0925f2296d5fd7b32bec3f26369fa022e42fa
- SHA512
  
  aaaa71429c6ca987f74659018651038b89255c1d1b99f885376e4afc4f9e6cc0726a6e4ddf1363a9aa874b31bb82b4b15c39b1df95b3a97990a824dadfcaa84d
- SSDEEP
  
  3072:Lu03SLyowCLiDUFVxTp7KHl7dtJagFaXc5ipoBHIPnk1226GTvszpzuV9MwVZG3d:IOYrVklZvagfJBHIPnUJ6GMFuTHG3d
Score

10^/10

smokeloader pub3 backdoor discovery trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
- Smokeloader family
  smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoordiscoverytrojan

behavioral2

smokeloaderpub3backdoordiscoverytrojan