smokeloader | 1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
20-08-2024 13:14

Sharing

Report Analysis Logs

General

Target

1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728.exe
Size

257KB
MD5

bd6490aeabc3f78750ef837986122876
SHA1

4d417c64f227349b40f2c95ce03e71f977045941
SHA256

1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728
SHA512

ae50ab3d3e6fc445a3ff203283eaf7d079655602d40b1c21e16f0f05bd155c9da7e88ce498841b1f57cb5c5f17e79f10a17c08d7e9fdb6bff37bb2030af28ec3
SSDEEP

3072:QSXQC0rYFzKwFH1A/HmP7Sfj5rxTfCT7LNOYr:rh0rYF+w3oGjGKrF

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728.exe
"C:\Users\Admin\AppData\Local\Temp\1e1a420770f48a0951a21f132ecb4311b632a220956dd296826e17bb1fb9b728.exe"
1⤵
PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1648-1-0x00000000008C0000-0x00000000009C0000-memory.dmp

Filesize
1024KB

Download
memory/1648-3-0x0000000000400000-0x0000000000452000-memory.dmp

Filesize
328KB

Download
memory/1648-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download