smokeloader | acc17deb417db03958118c1ac08156e0fca081605b909644523dd3fa887cf674 | Triage

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23-08-2024 02:29

Sharing

Report Analysis Logs

General

Target

acc17deb417db03958118c1ac08156e0fca081605b909644523dd3fa887cf674.exe
Size

208KB
MD5

655a5965f6358d8391e18cff5e600815
SHA1

14d41b08cc0608ad1f455174f58a281f44171514
SHA256

acc17deb417db03958118c1ac08156e0fca081605b909644523dd3fa887cf674
SHA512

f95ea69fce21596f3adef59031bb8455a47ade00769fe451f39ccc502d3ff86ab20434dd7c038e7105ee4f54641dc17560ee3b6a320aacaabc6496d7815916a5
SSDEEP

1536:FHsTyQCmnQdNTTA8svX5jsWaH2e5M6KvApxLeBFAr9PfN0911LT2BkWq45oOxe2g:FH7vdTAvXBYrMr/QVqBDWh5oWeLO6tM

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\acc17deb417db03958118c1ac08156e0fca081605b909644523dd3fa887cf674.exe
"C:\Users\Admin\AppData\Local\Temp\acc17deb417db03958118c1ac08156e0fca081605b909644523dd3fa887cf674.exe"
1⤵
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1640-1-0x0000000000600000-0x0000000000700000-memory.dmp

Filesize
1024KB

Download
memory/1640-3-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/1640-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download