smokeloader | cfbc0bab39f79c8315fddede574c7f76e56c32e7f72e5608686e9aaffc0f03dd | Triage

Analysis

max time kernel
10s
max time network
16s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27-08-2024 13:05

Sharing

Report Analysis Logs

General

Target

8ba933638258be85ae484487517938c0N.exe
Size

40KB
MD5

8ba933638258be85ae484487517938c0
SHA1

6c619c5a2af9096ae98fb422dfb46ce93878ddab
SHA256

cfbc0bab39f79c8315fddede574c7f76e56c32e7f72e5608686e9aaffc0f03dd
SHA512

eb369b5b7b4417638c335cd458276041e6ad196923c680393f5f929d1919a49887e0ba07784b76c773ef13dd79564d21fa346e95655b862e31dcfad5c16456fb
SSDEEP

768:CazBIa4ueiy5pj0FvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWjtSiN2lz/e7kcueKZN

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\8ba933638258be85ae484487517938c0N.exe
"C:\Users\Admin\AppData\Local\Temp\8ba933638258be85ae484487517938c0N.exe"
1⤵
PID:2544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2544-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2544-1-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download