smokeloader | fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21-08-2024 02:39

Sharing

Report Analysis Logs

General

Target

fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615.exe
Size

214KB
MD5

9d1f6aa879623e6d6f33384eb46dd2b2
SHA1

bab2f64f333c98a7f4a2de710d6c049c86ee337f
SHA256

fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615
SHA512

c1b48826c539795cbda80c0e77bb2bf3faf6bb2bf9d1a65c7de0bc49fec564cc9f8e9b7c77e4fa9cd825e4c5f10e14ce4669400a0b657b9e459d2fe0ca28b189
SSDEEP

1536:eJ+TtgGcg3SagFZIDgH7MBCPJWZVzf5FWgXRJz+27tZrPdo1C5LF2rk8y5YcXEbH:F2GyEgHINnzfv1XO478y5Dc

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615.exe
"C:\Users\Admin\AppData\Local\Temp\fc6cfef1718f95efbf77cd5db5916f0fe367ace76883c0af4f43f226ec461615.exe"
1⤵
PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1748-3-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download
memory/1748-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1748-1-0x0000000000290000-0x0000000000390000-memory.dmp

Filesize
1024KB

Download