smokeloader | 988dc2055d4448baef0e0312b3d64448094f3bfa018849175778b2e720cd02a0 | Triage

Analysis

max time kernel
21s
max time network
20s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 13:14

Sharing

Report Analysis Logs

General

Target

4d4a4bb6e3e735176db24307fce734b0N.exe
Size

216KB
MD5

4d4a4bb6e3e735176db24307fce734b0
SHA1

c3ea6253b93655af4c42a5933aec13b797c4ca12
SHA256

988dc2055d4448baef0e0312b3d64448094f3bfa018849175778b2e720cd02a0
SHA512

367a3b6e1e196454cb22995e7426ade8dd0d13ba56db79f9328e599fc609be1fdb5d498609dfe926e7c2e6b94b6e4520d435a3f35e153fb35e53e067d25f2886
SSDEEP

3072:30LxvdrLtwByH8VIWH/B8UIl22IfGjYq5ioZ3c:wvdOsH8VIWmB1h

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\4d4a4bb6e3e735176db24307fce734b0N.exe
"C:\Users\Admin\AppData\Local\Temp\4d4a4bb6e3e735176db24307fce734b0N.exe"
1⤵
PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1940-1-0x00000000004E0000-0x00000000005E0000-memory.dmp

Filesize
1024KB

Download
memory/1940-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1940-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1940-5-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1940-4-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download