smokeloader | 130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 22:30

Sharing

Report Analysis Logs

General

Target

130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75.exe
Size

245KB
MD5

eab8a9b818ef4e23bd92d7420ee33b77
SHA1

f4751ca6ff4d24c3bfada9ad043835a27f04d2f5
SHA256

130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75
SHA512

ce77e817741e460aa813d4efe1750f24f149bb4f7df23a06b7986c4ef09dc5303d0e0585928b78bf2b12dfa76a93f5bc8873fa03c8febe82b9c960ad41d1ff9f
SSDEEP

3072:TPh2xwoltiUJSigMfpzGUaG1v5jCnj95E:tWwoacgIyUaGzCjT

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75.exe
"C:\Users\Admin\AppData\Local\Temp\130ef444d7e6cd446c98932ce64ec44b56653258965cea4180baba5b570e4b75.exe"
1⤵
PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1904-2-0x0000000002C60000-0x0000000002D60000-memory.dmp

Filesize
1024KB

Download
memory/1904-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1904-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1904-1-0x0000000000400000-0x0000000002AFB000-memory.dmp

Filesize
39.0MB

Download