smokeloader | fb20b2f013f67c9b0833a8d895e189ae6d14c876edfc062e8f6beb288af7ad4c | Triage

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
18-08-2024 03:38

Sharing

Report Analysis Logs

General

Target

91c5be16a0920806b156dc117ff06960N.exe
Size

421KB
MD5

91c5be16a0920806b156dc117ff06960
SHA1

8e8abe418e07d9b706f2a9b51eb38f77c4724acd
SHA256

fb20b2f013f67c9b0833a8d895e189ae6d14c876edfc062e8f6beb288af7ad4c
SHA512

50d3df6b473cbb839e81eee2ae576c2fed868304bc2e415543c5a1b71a60cc4ca556e52988eff2679e057525e42ded7e5ad83ab07aece54b13d4e36e541e3625
SSDEEP

6144:clitdKHANjXlLaFjurn2asLaPjul1NWeSUdFysXUST:cItdKHANjXqapsL4juRNSUC0

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\91c5be16a0920806b156dc117ff06960N.exe
"C:\Users\Admin\AppData\Local\Temp\91c5be16a0920806b156dc117ff06960N.exe"
1⤵
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2068-1-0x00000000029C0000-0x0000000002AC0000-memory.dmp

Filesize
1024KB

Download
memory/2068-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2068-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2068-5-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2068-4-0x0000000000400000-0x0000000002851000-memory.dmp

Filesize
36.3MB

Download