smokeloader | 293f5b44be19fb27c14e039c64f90ef098c591a4ce3c24caeae171ba62685db1 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21-08-2024 09:57

Sharing

Report Analysis Logs

General

Target

293f5b44be19fb27c14e039c64f90ef098c591a4ce3c24caeae171ba62685db1.exe
Size

214KB
MD5

87e842e191cd8783d65aa2a8416ea84c
SHA1

4a618034581e9c9d16aa6947c024a156dcfffee9
SHA256

293f5b44be19fb27c14e039c64f90ef098c591a4ce3c24caeae171ba62685db1
SHA512

ab6e62afc6268e8bd4535daba95c88830191861a889018a4467903643780154ebe4295a4604e328ac4fbe8467223161d97abd52231e684bf547b3684faf709dd
SSDEEP

3072:gbVJya8rtyNsDSSSFTfwIeCHrTRKdoVW3uKx55PlhOcHe:zrANJFEjcrTC33z

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\293f5b44be19fb27c14e039c64f90ef098c591a4ce3c24caeae171ba62685db1.exe
"C:\Users\Admin\AppData\Local\Temp\293f5b44be19fb27c14e039c64f90ef098c591a4ce3c24caeae171ba62685db1.exe"
1⤵
PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1512-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1512-2-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download
memory/1512-1-0x0000000000550000-0x0000000000650000-memory.dmp

Filesize
1024KB

Download
memory/1512-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1512-5-0x0000000000550000-0x0000000000650000-memory.dmp

Filesize
1024KB

Download