smokeloader | 06d2686cd1635c0ae8ba731b309726a445ffc193705901b676482b2f529c4caf | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
21-08-2024 09:37

Sharing

Report Analysis Logs

General

Target

06d2686cd1635c0ae8ba731b309726a445ffc193705901b676482b2f529c4caf.exe
Size

200KB
MD5

107359e07abb8411a667a4b9f1ff5c87
SHA1

1f8f10b85f00f74b3d2724ee71b9548fd57b730d
SHA256

06d2686cd1635c0ae8ba731b309726a445ffc193705901b676482b2f529c4caf
SHA512

b4b8b459ee92db523e50e1d69dc497d49f68ca40f180face30ddc27c45d00be6c3a1e526494f2660843ecead27d2a08ba78cdf6d68e573ae760015a03e9e119a
SSDEEP

3072:5Lvv3tcYp0YHt02TnZDDSWO08Wb35NASi:5Lvv3tcYntdpsKMSi

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\06d2686cd1635c0ae8ba731b309726a445ffc193705901b676482b2f529c4caf.exe
"C:\Users\Admin\AppData\Local\Temp\06d2686cd1635c0ae8ba731b309726a445ffc193705901b676482b2f529c4caf.exe"
1⤵
PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2328-1-0x0000000000530000-0x0000000000630000-memory.dmp

Filesize
1024KB

Download
memory/2328-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2328-4-0x0000000000400000-0x0000000000445000-memory.dmp

Filesize
276KB

Download