smokeloader | c2a8c833c7bd7d6fca02a9048cd869a2698b219349c6bd540a601cb25da56290 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 07:09

Sharing

Report Analysis Logs

General

Target

0b5b6773e5b4e04f2eb96505eccae1ea.exe
Size

259KB
MD5

0b5b6773e5b4e04f2eb96505eccae1ea
SHA1

80904cd6a19a368bdf75bcc5b4726b36e9b66e48
SHA256

c2a8c833c7bd7d6fca02a9048cd869a2698b219349c6bd540a601cb25da56290
SHA512

4fe5f00496fa5e74c29145e367ccd81d05718c94c8b8df8a402684dcf583bede1674f6ed26c4461a6ed033a5ff08d66891586e46576023b34d9ee7a9ad12cfd8
SSDEEP

3072:qTBEcLTM1nKwe4SaS5oMAMHV9m2G5QlN+LkNoaV2VmP:JK/l1WMHVkgSkNosY

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\0b5b6773e5b4e04f2eb96505eccae1ea.exe
"C:\Users\Admin\AppData\Local\Temp\0b5b6773e5b4e04f2eb96505eccae1ea.exe"
1⤵
PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2856-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2856-1-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download
memory/2856-4-0x00000000005C0000-0x00000000006C0000-memory.dmp

Filesize
1024KB

Download
memory/2856-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2856-5-0x00000000005C0000-0x00000000006C0000-memory.dmp

Filesize
1024KB

Download