smokeloader | d2c003daab8f6f32f6feeeff393cff2be86149c98ab4f484e266ca304bab5e8b | Triage

Resubmissions

19/05/2024, 21:23

240519-z8sxqaaf7v 10

04/03/2023, 01:15

230304-bmabgscb99 10

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
19/05/2024, 21:23

Sharing

Report Analysis Logs

General

Target

d2c003daab8f6f32f6feeeff393cff2be86149c98ab4f484e266ca304bab5e8b.exe
Size

180KB
MD5

15b60623c9bca83824f1167b90e85e19
SHA1

2843541afb8ec9fc10083a4cf89e3eea9fa8085f
SHA256

d2c003daab8f6f32f6feeeff393cff2be86149c98ab4f484e266ca304bab5e8b
SHA512

2de2f0baffef67c1cd5653e30fd7a640881373484db86e465b157d9d6e2bfb329295b911d6eaaa8b880160277afc4dda21ff6c70a8f114da32315c6bc10f4634
SSDEEP

3072:3+utkx7rgxYELEcyZ5lJuulGSrCGpZ7jAXPSQ:ZaxngxYrZbI6hTj

Score

10^/10

smokeloader sprg backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\d2c003daab8f6f32f6feeeff393cff2be86149c98ab4f484e266ca304bab5e8b.exe
"C:\Users\Admin\AppData\Local\Temp\d2c003daab8f6f32f6feeeff393cff2be86149c98ab4f484e266ca304bab5e8b.exe"
1⤵
PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2936-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2936-4-0x00000000006A0000-0x00000000007A0000-memory.dmp

Filesize
1024KB

Download
memory/2936-2-0x0000000000220000-0x0000000000229000-memory.dmp

Filesize
36KB

Download
memory/2936-1-0x0000000000400000-0x0000000000571000-memory.dmp

Filesize
1.4MB

Download