smokeloader | 4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 01:17

Sharing

Report Analysis Logs

General

Target

4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca.exe
Size

215KB
MD5

37196d4e134a46261437d125cbb6106f
SHA1

a95acd837f9246c6705a7c1d0759a2a92e7c3115
SHA256

4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca
SHA512

08f194afe8c73e0f3ae7d2039c8372a4c9362fa922557ae4190c2cfc1388d5991f92d4552122021a27fcbcf744faac05dcb552225e7c41e6cdc1cc6165112f66
SSDEEP

1536:RgqRq7WZCIrwtMpF1x0Pyb7/JF5c6w1cnJ5Q8L3xg3JRlgndoFGWLV2VkWa56UBR:yXZIrwUjpcb1S7Wk23FWa5Sk3G3c

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca.exe
"C:\Users\Admin\AppData\Local\Temp\4afc89088fe5635881011ef15d03178c01ca30730a0f64c2ab6e142a451bdfca.exe"
1⤵
PID:2716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2716-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2716-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2716-2-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download
memory/2716-1-0x00000000005C0000-0x00000000006C0000-memory.dmp

Filesize
1024KB

Download
memory/2716-5-0x00000000005C0000-0x00000000006C0000-memory.dmp

Filesize
1024KB

Download