smokeloader | 9e834dd024c42b8e97a65dbfedc2bbbfc0bc2d28aede9a5eebdcf1fe41fdc001 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
25/07/2024, 22:45

Sharing

Report Analysis Logs

General

Target

9e834dd024c42b8e97a65dbfedc2bbbfc0bc2d28aede9a5eebdcf1fe41fdc001.exe
Size

267KB
MD5

d433e234e739fe061cd2ce6324f44750
SHA1

de7cb5704ac74be5f7d62bd114842bda1384e451
SHA256

9e834dd024c42b8e97a65dbfedc2bbbfc0bc2d28aede9a5eebdcf1fe41fdc001
SHA512

fee704157028ab2ab9b7d77f9fef3c4c814276805d75608f26f5372403eaa9f478a143fa81908c465a6b04e68ccf4a31aa0d974feb503d2b2cc40f5059083998
SSDEEP

3072:V6tSmr1TnidgbykCWA5J4KF7SGAti1X6ftS9/alMN2RvpTu:oMoTnibdJzR72iMlSZRQvpT

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\9e834dd024c42b8e97a65dbfedc2bbbfc0bc2d28aede9a5eebdcf1fe41fdc001.exe
"C:\Users\Admin\AppData\Local\Temp\9e834dd024c42b8e97a65dbfedc2bbbfc0bc2d28aede9a5eebdcf1fe41fdc001.exe"
1⤵
PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2220-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2220-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2220-1-0x0000000000400000-0x000000000245B000-memory.dmp

Filesize
32.4MB

Download
memory/2220-4-0x0000000000400000-0x000000000245B000-memory.dmp

Filesize
32.4MB

Download
memory/2220-5-0x0000000000400000-0x000000000245B000-memory.dmp

Filesize
32.4MB

Download