smokeloader | 802577ef627ab553a5e281797896a912eb2dc629ccc6b318eada7ef8fbfb24ba | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 11:43

Sharing

Report Analysis Logs

General

Target

9792a07f9c7a4db8e9801ee6d4d3e575.exe
Size

200KB
MD5

9792a07f9c7a4db8e9801ee6d4d3e575
SHA1

4c5426bc47eec2182cee768784611f09e9170d0b
SHA256

802577ef627ab553a5e281797896a912eb2dc629ccc6b318eada7ef8fbfb24ba
SHA512

3c9c7cfb7ad7021e6923c4aa81b861e9f65a56bafcc54aee31ba0e174d88c59f1539d913498123d9fd365abc122d039f35e39dbc01c0e04b814e03f4750ac32b
SSDEEP

1536:wmWXBL9533UbcYeP+VwdRFxlY+ZuqcUlitNimH/QCUKc9Nu7T3IwJasPy/5leyta:UxLPvYJwO+ZuUdmfQv87T3RasPG5l7W

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\9792a07f9c7a4db8e9801ee6d4d3e575.exe
"C:\Users\Admin\AppData\Local\Temp\9792a07f9c7a4db8e9801ee6d4d3e575.exe"
1⤵
PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1040-1-0x00000000002B0000-0x00000000003B0000-memory.dmp

Filesize
1024KB

Download
memory/1040-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1040-3-0x00000000001B0000-0x00000000001BB000-memory.dmp

Filesize
44KB

Download
memory/1040-2-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/1040-5-0x00000000002B0000-0x00000000003B0000-memory.dmp

Filesize
1024KB

Download