smokeloader | d3e138b03be305d34d6ee21c5f4cc4d496ff447601ffb71508e23e580bd50e7c | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 07:10

Sharing

Report Analysis Logs

General

Target

f0acef7e2d7b1a8d231fe6015ba8ece8.exe
Size

263KB
MD5

f0acef7e2d7b1a8d231fe6015ba8ece8
SHA1

a5a75364df3e731f629d85db72945798c14692f2
SHA256

d3e138b03be305d34d6ee21c5f4cc4d496ff447601ffb71508e23e580bd50e7c
SHA512

a321d94b52151fa8807c4906d4eb0e09e80d862d882d64322a99c4029e1a23088623bd9c5ed3db207526010121b107ca5615e28554d4779f2adf6966d0cc3873
SSDEEP

3072:g7BLqLlNkHGhJQm+04DLPkpVYi300gQDjHU5klN+LkNoCGwP6:vh7+VX8DzLSkNoCG

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\f0acef7e2d7b1a8d231fe6015ba8ece8.exe
"C:\Users\Admin\AppData\Local\Temp\f0acef7e2d7b1a8d231fe6015ba8ece8.exe"
1⤵
PID:1056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1056-1-0x0000000000610000-0x0000000000710000-memory.dmp

Filesize
1024KB

Download
memory/1056-3-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1056-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download