smokeloader | cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 01:57

Sharing

Report Analysis Logs

General

Target

cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e.exe
Size

200KB
MD5

17f7f4b11e8083758da38898181e0bbd
SHA1

7405193384b8f024061d73ff51fa8fcee774c9aa
SHA256

cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e
SHA512

62cc0a29232a8d160ac19c9236b12888b2319f99cd6a43aa2ea484491160502f6df0a63957f460524c5cfd59c9763a7c88e2cbba788cc560c80cbf315c033653
SSDEEP

1536:4diUKLvcUhxR3t5PGE0Ul5KNHdHkGJPxAka4BEJK6+lkUYq8vK5g9o5NNNJH0AE0:fLvv3tcE0vHdEGck8JTgk985x5NZ

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e.exe
"C:\Users\Admin\AppData\Local\Temp\cb725bce1489b81801ff6855b81d79f4604afbc8dc1efa75aa515f929732af1e.exe"
1⤵
PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2456-1-0x00000000004C0000-0x00000000005C0000-memory.dmp

Filesize
1024KB

Download
memory/2456-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2456-4-0x0000000000400000-0x0000000000445000-memory.dmp

Filesize
276KB

Download