Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
17-04-2024 13:11
Static task
static1
Behavioral task
behavioral1
Sample
2952319efa611dd3cd0704bd8bf3f6bce423cd88aace8e28e51b19c672d209cf.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2952319efa611dd3cd0704bd8bf3f6bce423cd88aace8e28e51b19c672d209cf.exe
Resource
win10v2004-20240412-en
General
-
Target
2952319efa611dd3cd0704bd8bf3f6bce423cd88aace8e28e51b19c672d209cf.exe
-
Size
309KB
-
MD5
26ce123ca4fb973543d48c2da9ece87e
-
SHA1
ab474a3c06831b4f673f400f912f77cd3fd154fd
-
SHA256
2952319efa611dd3cd0704bd8bf3f6bce423cd88aace8e28e51b19c672d209cf
-
SHA512
502aa5d8c6c1a2902f22048d862b7d92a008d5a5c34862bd876851275e8217afad479bf02810de60b06f5ba6a557e758d12dd67418f927c784bb464553eb22b7
-
SSDEEP
6144:0L8EEnOV4QFDXk44lMZzx+dzj8aYI0FjT:0BEn+FDXXZVKzgQ0F3
Malware Config
Extracted
smokeloader
pub3
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2104-5-0x00000000001B0000-0x00000000001BB000-memory.dmpFilesize
44KB
-
memory/2104-4-0x0000000000400000-0x0000000000AF6000-memory.dmpFilesize
7.0MB
-
memory/2104-2-0x00000000001B0000-0x00000000001BB000-memory.dmpFilesize
44KB
-
memory/2104-1-0x00000000002D0000-0x00000000003D0000-memory.dmpFilesize
1024KB