smokeloader | 18b275bc2019a1023703c48af79133bc6bdfce5ea68b72837c3ea96244d0ea7d | Triage

Analysis

max time kernel
16s
max time network
20s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
20/08/2024, 01:07

Sharing

Report Analysis Logs

General

Target

18b275bc2019a1023703c48af79133bc6bdfce5ea68b72837c3ea96244d0ea7d.exe
Size

211KB
MD5

bead29639262d9e62e74e23eb65eb480
SHA1

bff76800b0eafca77ce5db423ceaed0a1885962b
SHA256

18b275bc2019a1023703c48af79133bc6bdfce5ea68b72837c3ea96244d0ea7d
SHA512

d2f0ffed0d8443958610abc7f601153089a1e2a209b180ee81e99e2bf4b2756380481731dae2bae1617fb81f875f43d08e72372004a9fe793711a4f3e2ea9ba4
SSDEEP

3072:+nLAF9Hh1ixm20saYC5uyq/pkxePmxGj49wBv5vFa:SLAF9B8q3YKurpRgJWa

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\18b275bc2019a1023703c48af79133bc6bdfce5ea68b72837c3ea96244d0ea7d.exe
"C:\Users\Admin\AppData\Local\Temp\18b275bc2019a1023703c48af79133bc6bdfce5ea68b72837c3ea96244d0ea7d.exe"
1⤵
PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2532-1-0x00000000005D0000-0x00000000006D0000-memory.dmp

Filesize
1024KB

Download
memory/2532-3-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download
memory/2532-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download