smokeloader | 111c86b2562c801e94191e330c263eb0d43e6d47d0b714ecab4280d588add894 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14-08-2024 20:00

Sharing

Report Analysis Logs

General

Target

1e0e4788f512a69fc87aac99112d6ea0N.exe
Size

415KB
MD5

1e0e4788f512a69fc87aac99112d6ea0
SHA1

ae7f90faf7c70aeea604877bf281969e6609574e
SHA256

111c86b2562c801e94191e330c263eb0d43e6d47d0b714ecab4280d588add894
SHA512

e707031ee2c7e4f2de9a8c519e2060b3028819b7bcf3f634c99a4486d50913106d6a8c46ca8a4ee3716034715460dee05041c07e2002ab915628e4c5f89e846a
SSDEEP

6144:1Nuh5OQ/NcedDDGllvv7buQ45m+P1jM+yBc5at96Nkmu3/EHIT:1NkkQ/Nx3iNv7bytapCoPE4

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\1e0e4788f512a69fc87aac99112d6ea0N.exe
"C:\Users\Admin\AppData\Local\Temp\1e0e4788f512a69fc87aac99112d6ea0N.exe"
1⤵
PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1932-2-0x0000000002CC0000-0x0000000002DC0000-memory.dmp

Filesize
1024KB

Download
memory/1932-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1932-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1932-1-0x0000000000400000-0x0000000002851000-memory.dmp

Filesize
36.3MB

Download