smokeloader | c3f3d7cea638c32610d85c9c1dfdcfe3cba3dad9e932257113f07ffcac34b280 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27-05-2024 14:33

Sharing

Report Analysis Logs

General

Target

c3f3d7cea638c32610d85c9c1dfdcfe3cba3dad9e932257113f07ffcac34b280.exe
Size

260KB
MD5

f3f095e318139392f5486417727d1bee
SHA1

14d2b54dcdbad6b6d26bff0a693d180e2e1ba1a1
SHA256

c3f3d7cea638c32610d85c9c1dfdcfe3cba3dad9e932257113f07ffcac34b280
SHA512

b181d3fa0995d7a94767b2c1806b4d8388588aca6548fc414653c72e2ab56e3498c5e1ab61f554d2b23ef829411ff05c578e9d2b55dd811ec67e2297ca23abb8
SSDEEP

3072:I5Zx8p6cN80CZ5+bsOyz27Vazgp2U9UUnrDyMuQKBenolE5zdxLb6xTx7:kx8U0800Vz27VWgp2UlrD3vnom7LWT

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\c3f3d7cea638c32610d85c9c1dfdcfe3cba3dad9e932257113f07ffcac34b280.exe
"C:\Users\Admin\AppData\Local\Temp\c3f3d7cea638c32610d85c9c1dfdcfe3cba3dad9e932257113f07ffcac34b280.exe"
1⤵
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1700-2-0x0000000002D10000-0x0000000002E10000-memory.dmp

Filesize
1024KB

Download
memory/1700-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1700-3-0x00000000002A0000-0x00000000002AB000-memory.dmp

Filesize
44KB

Download
memory/1700-1-0x0000000000400000-0x0000000002C9F000-memory.dmp

Filesize
40.6MB

Download