Analysis
-
max time kernel
119s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 01:57
Static task
static1
Behavioral task
behavioral1
Sample
e6cf2ae79432017ed234aa7d595ebcf4934f8955223518d2a5ea7eefc8d83afd.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e6cf2ae79432017ed234aa7d595ebcf4934f8955223518d2a5ea7eefc8d83afd.exe
Resource
win10-20240221-en
General
-
Target
e6cf2ae79432017ed234aa7d595ebcf4934f8955223518d2a5ea7eefc8d83afd.exe
-
Size
311KB
-
MD5
3d7dd2b2871160b365b94480b15b9ac5
-
SHA1
a081bf4469537ac9b30e6e55fac4021833a5fe56
-
SHA256
e6cf2ae79432017ed234aa7d595ebcf4934f8955223518d2a5ea7eefc8d83afd
-
SHA512
dd0b03fc18ae326a0853f30b34479e6e0fa37c10ce97798188ffaab394ff23180009be267d856c7f4e00f957e6d3d3ac44f5537c13979b714ae2ed48cd91b4a3
-
SSDEEP
3072:ETDj0SvvDbjVf4m+N0iXfsHF96XU5Q2YYoAkRrGcdfv11b1dkFjTmc:Efj9ZKfE6YQ2YYcR60H1dkFjT
Malware Config
Extracted
smokeloader
pub1
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2052-1-0x0000000000BC0000-0x0000000000CC0000-memory.dmpFilesize
1024KB
-
memory/2052-2-0x0000000000220000-0x000000000022B000-memory.dmpFilesize
44KB
-
memory/2052-4-0x0000000000400000-0x0000000000AF7000-memory.dmpFilesize
7.0MB
-
memory/2052-3-0x0000000000400000-0x0000000000AF7000-memory.dmpFilesize
7.0MB
-
memory/2052-5-0x0000000000220000-0x000000000022B000-memory.dmpFilesize
44KB