smokeloader | c384aac5ab77edf0f2138756a27c0ca64a2fff5fb724fa249582126bf6651c3c | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
21-08-2024 11:06

Sharing

Report Analysis Logs

General

Target

c384aac5ab77edf0f2138756a27c0ca64a2fff5fb724fa249582126bf6651c3c.exe
Size

40KB
MD5

097fc0e995491a2c31da6b79ea03aa9d
SHA1

7cdd4fcdcc1aa0e2bee5296acced79dba57bb105
SHA256

c384aac5ab77edf0f2138756a27c0ca64a2fff5fb724fa249582126bf6651c3c
SHA512

56d1aee5241ac7d7f8e27950085b83f1145d19023dab54c0811c5dbe2d5373021d91a9474f08f712ed087a94887119c8bf4a97a99883ee5c2b7233643fecdecd
SSDEEP

768:CazBIa4ueiy5pj0FvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWjtSiN2lz/e7kcueKZN

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\c384aac5ab77edf0f2138756a27c0ca64a2fff5fb724fa249582126bf6651c3c.exe
"C:\Users\Admin\AppData\Local\Temp\c384aac5ab77edf0f2138756a27c0ca64a2fff5fb724fa249582126bf6651c3c.exe"
1⤵
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2244-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2244-1-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download