Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 19:06
Static task
static1
Behavioral task
behavioral1
Sample
a66f7c783c40326c27fad4db5587dc85.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a66f7c783c40326c27fad4db5587dc85.exe
Resource
win10v2004-20240508-en
General
-
Target
a66f7c783c40326c27fad4db5587dc85.exe
-
Size
210KB
-
MD5
a66f7c783c40326c27fad4db5587dc85
-
SHA1
77212137e94cd93a955374ff013d5ae8c92a0af5
-
SHA256
09ae5b72d7b3da05904c0edf9985ca64bca078f0a38e01eaceccc26bc2113fd8
-
SHA512
15fe97c4dcf2f0435e5b18840a7aea540bcff40566c5ae45dea3df03647aeb3e004de8bc773d5badf1fcdea76be7a854613784cbba06aa55064b6023acb8e188
-
SSDEEP
3072:sskFUgrChWOZ55UV9+GSi/6nIFjkFce9SkqB/3cx+JB/gjSQYUbJJRN5pwYS:MFL2WOH6fajL9Hw3O+JBkY+/fuY
Malware Config
Extracted
smokeloader
sel2
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1740-1-0x0000000000400000-0x0000000002C93000-memory.dmpFilesize
40.6MB
-
memory/1740-3-0x00000000001B0000-0x00000000001BB000-memory.dmpFilesize
44KB
-
memory/1740-2-0x0000000000400000-0x000000000040B000-memory.dmpFilesize
44KB
-
memory/1740-4-0x0000000000400000-0x0000000002C93000-memory.dmpFilesize
40.6MB