smokeloader | b6f26aaf35c5d06d131291c0a61d3fc5ab549e768762782a5254a41796a55ed5

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30-05-2024 23:23

Target

b6f26aaf35c5d06d131291c0a61d3fc5ab549e768762782a5254a41796a55ed5.exe
Size

256KB
MD5

948036596156e2d9dd331c71df147a65
SHA1

6ebc3cc21f34c7b9cc94762288171a72ca1880b5
SHA256

b6f26aaf35c5d06d131291c0a61d3fc5ab549e768762782a5254a41796a55ed5
SHA512

47d9ab36c8cf3b268cc294494c2b3fab6b03e1ccdacce5b2426ae3a8c9719fb04220d4883de5df2725ded1bfef10118d9e3bd56e971e29b22b6808033adf8b8d
SSDEEP

3072:AhERYbqvaTK0ZiuYneAfl4Ghqlu5OX/eFoLuV/:Ah7bGleA9PAVX/DLi/

Score

10^/10

Family

smokeloader

Botnet

pub1

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\b6f26aaf35c5d06d131291c0a61d3fc5ab549e768762782a5254a41796a55ed5.exe
"C:\Users\Admin\AppData\Local\Temp\b6f26aaf35c5d06d131291c0a61d3fc5ab549e768762782a5254a41796a55ed5.exe"
1⤵
PID:2192

memory/2192-2-0x00000000001B0000-0x00000000001BB000-memory.dmp

Filesize
44KB

Download
memory/2192-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2192-1-0x0000000000270000-0x0000000000370000-memory.dmp

Filesize
1024KB

Download
memory/2192-5-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2192-4-0x0000000000400000-0x0000000001F8C000-memory.dmp

Filesize
27.5MB

Download