smokeloader | 82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
23-08-2024 02:17

Sharing

Report Analysis Logs

General

Target

82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c.exe
Size

208KB
MD5

4f132cd93fe858362c4feb4d4effd90a
SHA1

6227cb221e604ec4d9c0e00a2d0ced0fb14a23fc
SHA256

82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c
SHA512

8dffd1a9fb21bae9bbf0153887d60e20fbcab86452e654e4ed2b66a993f91af48e520751bcd3535949e37eb4976aec057bb1710b27f610ef40d96d71100ffc68
SSDEEP

3072:+XSI/Bv48I9DWF/VLVqY81GcPE5EZRrBLrcJ7itM:+XcX9DWB1ZtarFgJ

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c.exe
"C:\Users\Admin\AppData\Local\Temp\82d99b840ac392300eb572ed71f77b62278361bce95488e24b0f53de4d67ad8c.exe"
1⤵
PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1660-1-0x00000000004C0000-0x00000000005C0000-memory.dmp

Filesize
1024KB

Download
memory/1660-3-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download
memory/1660-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download