smokeloader | e4aa6eba15dd07e72baedbe1941b4716455baccb3fe9911af8e41cf1c980c5e8 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
01-06-2024 00:33

Sharing

Report Analysis Logs

General

Target

865b66e62050618c57975c923ad7ad90_NeikiAnalytics.exe
Size

30KB
MD5

865b66e62050618c57975c923ad7ad90
SHA1

641f4c9efd6fee9ea03dfdfbcf952f5c4b602e74
SHA256

e4aa6eba15dd07e72baedbe1941b4716455baccb3fe9911af8e41cf1c980c5e8
SHA512

dd465c82aa960133e82b936002b67eaf67aa6c4471ead26e2072c9a59b26959be422e00681f7210bfc6ed179f20c9632f80ce65be6aa397f85d43b4ac2beaad7
SSDEEP

768:ysvWl+T1co8+aNsS0/WGx4azrT+GHw2tH9yI:ys/T1u+0sSzG5bd

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\865b66e62050618c57975c923ad7ad90_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\865b66e62050618c57975c923ad7ad90_NeikiAnalytics.exe"
1⤵
PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1752-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download