smokeloader | 41d38ed7396b03eaa10f074a3af4f6cf2e687049c23a8e369c870df49ffdd5f6 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 11:45

Sharing

Report Analysis Logs

General

Target

135f7e21ebe965bc4a1143d4d542f7d1.exe
Size

214KB
MD5

135f7e21ebe965bc4a1143d4d542f7d1
SHA1

096950e8f1843ab51ae6203197d7851be7d4817f
SHA256

41d38ed7396b03eaa10f074a3af4f6cf2e687049c23a8e369c870df49ffdd5f6
SHA512

bdfcabbfc8dcdaeb33d5783cb77e668e78a998a5693218ac9eda9da61e8c1fd52251dc346a76811aaa38bd1ac04d605086be0fa2f6be01e89cbdad91b86d94d3
SSDEEP

3072:f2LAwnCaTHFHwsZoYlwKWJBjpOdAlchoiRt5dXu:eLAwnCjYldWHpObhoA+

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\135f7e21ebe965bc4a1143d4d542f7d1.exe
"C:\Users\Admin\AppData\Local\Temp\135f7e21ebe965bc4a1143d4d542f7d1.exe"
1⤵
PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3032-1-0x00000000005B0000-0x00000000006B0000-memory.dmp

Filesize
1024KB

Download
memory/3032-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/3032-2-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download