smokeloader | 0b3d482dd4c05dafe53de7afbef7d8d13a62c687a7e705c212fcfe536ec22d9e | Triage

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240319-en
resource tags

arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
submitted
13-04-2024 01:01

Sharing

Report Analysis Logs

General

Target

0b3d482dd4c05dafe53de7afbef7d8d13a62c687a7e705c212fcfe536ec22d9e.exe
Size

325KB
MD5

c009d4d9d319cf4e11aa99b6d57fb433
SHA1

448d7e0994c44bb56f95e9073891ccd5c6d51a86
SHA256

0b3d482dd4c05dafe53de7afbef7d8d13a62c687a7e705c212fcfe536ec22d9e
SHA512

8ddb8ae2b808cbf2a459b3ea21573e2eed8b362b8558610beeff77013a7b9de8889c7b55a8e97a01c7988cdde4a91dfd523ab84b2ab9766f242a0b734eb77635
SSDEEP

3072:W7oggIL3mnqnjGt4RI5BnqV6olpiaRqUQ5iru5y7qQ:W7HgIL3WqjGt4RiRqV6OlqUuku5yW

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\0b3d482dd4c05dafe53de7afbef7d8d13a62c687a7e705c212fcfe536ec22d9e.exe
"C:\Users\Admin\AppData\Local\Temp\0b3d482dd4c05dafe53de7afbef7d8d13a62c687a7e705c212fcfe536ec22d9e.exe"
1⤵
PID:2396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2396-1-0x00000000005B0000-0x00000000006B0000-memory.dmp

Filesize
1024KB

Download
memory/2396-3-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download
memory/2396-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download