smokeloader | 800e637ce31be2168b42887a1f4abe88f0a6745f3c64c0d245534e8134179e28 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 00:18

Sharing

Report Analysis Logs

General

Target

4ed158d454e02b40a4d7fc3702cafa10_NeikiAnalytics.exe
Size

211KB
MD5

4ed158d454e02b40a4d7fc3702cafa10
SHA1

12e31b9b14b21fbf7eab615d26c91bf1ca7c769e
SHA256

800e637ce31be2168b42887a1f4abe88f0a6745f3c64c0d245534e8134179e28
SHA512

e277448d24bf5d3c63e0936f9647ca26b8c015846cb63cd95e561dd9e56ff30f32185a21ef2115f1f54dfbf5317cfcd5bf41116d2067ce35ecc707ab3e2f2642
SSDEEP

3072:n/Lq1qtnXDEpGcUDIneQg8Qx5R5IxIvsBkJQlP:nXDEYZX8Qj0deJK

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\4ed158d454e02b40a4d7fc3702cafa10_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\4ed158d454e02b40a4d7fc3702cafa10_NeikiAnalytics.exe"
1⤵
PID:1576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1576-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1576-1-0x0000000002C80000-0x0000000002D80000-memory.dmp

Filesize
1024KB

Download
memory/1576-2-0x0000000000400000-0x0000000002AF2000-memory.dmp

Filesize
38.9MB

Download
memory/1576-4-0x0000000000400000-0x0000000002AF2000-memory.dmp

Filesize
38.9MB

Download
memory/1576-5-0x0000000000400000-0x0000000002AF2000-memory.dmp

Filesize
38.9MB

Download