smokeloader | 2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 23:02

Target

2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b.exe
Size

204KB
MD5

3c85a563d1783ae7e37da0d68e2fc834
SHA1

c4afd3247a9bf9386815099bfee5ffc0bd2376db
SHA256

2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
SHA512

7ac0b26b73440593bf1ff299541f086798e4768410f42cfa404ec2c267ce5d3fd05cb9462c66a50a99095544e427c59abd45afa4fd18113da6e8cb93f826a8de
SSDEEP

3072:YkBkW8LXXrWkZv+Zs6NZdMGcKR8ifY13t1u4HZIfA3WKTLYS:YFjLXy00zGKRffY1dUIZT3WkY

Score

10^/10

Family

smokeloader

Botnet

pub1

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b.exe
"C:\Users\Admin\AppData\Local\Temp\2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b.exe"
1⤵
PID:1724

memory/1724-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1724-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1724-2-0x0000000000595000-0x00000000005AA000-memory.dmp

Filesize
84KB

Download
memory/1724-1-0x0000000000400000-0x000000000047D000-memory.dmp

Filesize
500KB

Download