smokeloader | 295541b770ee3873d47f03525ff821c20b2543dd2af4c5e5fb1aa1369ee987ef | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
21-08-2024 01:19

Sharing

Report Analysis Logs

General

Target

295541b770ee3873d47f03525ff821c20b2543dd2af4c5e5fb1aa1369ee987ef.exe
Size

215KB
MD5

5d831cc9a1f0d0373c115a4211718bb9
SHA1

843a5d61efe3323266a07678cbbe711527199313
SHA256

295541b770ee3873d47f03525ff821c20b2543dd2af4c5e5fb1aa1369ee987ef
SHA512

436c0190964db2a2e73e36d77e78fb9139b718e76707afd4a6c41770e01f07fcb413ac47ab3735b69dad3125d90984caba0c8a2649c6c8b50e3cf8830abe19a9
SSDEEP

3072:S4Ahcr4E2HPaXa3n1jL7yRIAMW5MWB5NpO3c:Sm2HgaX1XyRI6JpO

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\295541b770ee3873d47f03525ff821c20b2543dd2af4c5e5fb1aa1369ee987ef.exe
"C:\Users\Admin\AppData\Local\Temp\295541b770ee3873d47f03525ff821c20b2543dd2af4c5e5fb1aa1369ee987ef.exe"
1⤵
PID:2848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2848-1-0x00000000004E0000-0x00000000005E0000-memory.dmp

Filesize
1024KB

Download
memory/2848-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2848-3-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download