smokeloader | acc17deb417db03958118c1ac08156e0fca081605b909644523dd3fa887cf674 | Triage

Analysis

max time kernel
14s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22-08-2024 07:17

Sharing

Report Analysis Logs

General

Target

655a5965f6358d8391e18cff5e600815.exe
Size

208KB
MD5

655a5965f6358d8391e18cff5e600815
SHA1

14d41b08cc0608ad1f455174f58a281f44171514
SHA256

acc17deb417db03958118c1ac08156e0fca081605b909644523dd3fa887cf674
SHA512

f95ea69fce21596f3adef59031bb8455a47ade00769fe451f39ccc502d3ff86ab20434dd7c038e7105ee4f54641dc17560ee3b6a320aacaabc6496d7815916a5
SSDEEP

1536:FHsTyQCmnQdNTTA8svX5jsWaH2e5M6KvApxLeBFAr9PfN0911LT2BkWq45oOxe2g:FH7vdTAvXBYrMr/QVqBDWh5oWeLO6tM

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\655a5965f6358d8391e18cff5e600815.exe
"C:\Users\Admin\AppData\Local\Temp\655a5965f6358d8391e18cff5e600815.exe"
1⤵
PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2112-1-0x0000000000230000-0x0000000000330000-memory.dmp

Filesize
1024KB

Download
memory/2112-3-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/2112-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download