smokeloader | 8f2c6eaad807830b0f43114d62275020058a6fd3b0ac60dd1c4a9dc507b7d66e | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 11:44

Sharing

Report Analysis Logs

General

Target

c366cef60cf79292de9b858721896e5b.exe
Size

200KB
MD5

c366cef60cf79292de9b858721896e5b
SHA1

2084522df7140bb8d0aa6b127e24b52d583f4da7
SHA256

8f2c6eaad807830b0f43114d62275020058a6fd3b0ac60dd1c4a9dc507b7d66e
SHA512

6538b1640d87cdb23e05f3833e19cd7d9f7969ef4a64e468d23efc8f1ca03aec6706bb0e9aad39b1e589479693d8c2830df8d0fd62b84ecff8ce1e9b44323c4f
SSDEEP

3072:keL0evN5IJeJvm1Rse7TpE6dQqGhJNPw5A6dxC:keL0evNuJeZ6R77TpJmhGC

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\c366cef60cf79292de9b858721896e5b.exe
"C:\Users\Admin\AppData\Local\Temp\c366cef60cf79292de9b858721896e5b.exe"
1⤵
PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2356-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2356-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2356-2-0x0000000000560000-0x0000000000660000-memory.dmp

Filesize
1024KB

Download
memory/2356-1-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2356-5-0x0000000000560000-0x0000000000660000-memory.dmp

Filesize
1024KB

Download