smokeloader | 083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 12:50

Sharing

Report Analysis Logs

General

Target

083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9.exe
Size

200KB
MD5

578ca3bad325b98d29d5236047d46837
SHA1

1eaf830fd2e8680be5c575a7b04b3ea5323bfa82
SHA256

083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9
SHA512

04a586a0657d998d65cc442451005ccd0532f68a800e4f784c5a35d5819e0bc15ec6016a9ee1e7a4e75830c51145c53866cc6508d2960635e24b751ed4be9ecc
SSDEEP

3072:kvLHoXGY8x+vuL9qGXvTKN4sSkOBh54RRj:ILHoWYYl9qGv+DB

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9.exe
"C:\Users\Admin\AppData\Local\Temp\083ebd62bc39fe5f32cde8c74135e4c7228177491947b220b1f5f4be31dbbdc9.exe"
1⤵
PID:1772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1772-1-0x0000000000270000-0x0000000000370000-memory.dmp

Filesize
1024KB

Download
memory/1772-3-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/1772-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download