smokeloader | 1c4856a56c6b9b168d73deb0fcc740215455041edcf96f90d48d2f31726f7269 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22-08-2024 07:17

Sharing

Report Analysis Logs

General

Target

12edc0d0e4949cca2c3999c73659b4c9.exe
Size

170KB
MD5

12edc0d0e4949cca2c3999c73659b4c9
SHA1

a433c3a79bf5f357052bc84618713b156e8f86cf
SHA256

1c4856a56c6b9b168d73deb0fcc740215455041edcf96f90d48d2f31726f7269
SHA512

c20803fd19f12dc5dde9cf31786035e3dfa4148ee70910a22815e66aa443b93f0a67ac157078817cbd3d3cdcdc8a099bb331e8f83c57550564ac145f3a342bcf
SSDEEP

3072:g9UmLHrG3HLZ7KZzCVf4szZdQtaKwGJUq0w+Ux5LtW+7KDz3+BwygJBXETBS:WLLkrZ7K4VAwGSet7A3+GGS

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\12edc0d0e4949cca2c3999c73659b4c9.exe
"C:\Users\Admin\AppData\Local\Temp\12edc0d0e4949cca2c3999c73659b4c9.exe"
1⤵
PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2504-1-0x0000000000580000-0x0000000000680000-memory.dmp

Filesize
1024KB

Download
memory/2504-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2504-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2504-2-0x0000000000400000-0x00000000004BB000-memory.dmp

Filesize
748KB

Download