smokeloader | 28399ac361d0f52d9585c25546199bb48d02df8c56a732d99c5e9347752b215e | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
27-08-2024 21:23

Sharing

Report Analysis Logs

General

Target

28399ac361d0f52d9585c25546199bb48d02df8c56a732d99c5e9347752b215e.exe
Size

358KB
MD5

b711f828e375f67a65a26ff6134110f2
SHA1

261f19bfb4860659f21d9845a47bfa3512a8177b
SHA256

28399ac361d0f52d9585c25546199bb48d02df8c56a732d99c5e9347752b215e
SHA512

56a538deaaa9265f965cb2b31c4467a7308248b453a5b16d5b76ba5491e0dc4f6396c36f3bc1bc4b2eee5dfd9f22d47457a3f6c6119a8075a3dac821ef3849a1
SSDEEP

6144:038eVUUEUHvpsMugYcjHd3MusjMmeSPHBeUQJYMpaF:C8eVUzUHviMuGHd3M/Fnf0YnF

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\28399ac361d0f52d9585c25546199bb48d02df8c56a732d99c5e9347752b215e.exe
"C:\Users\Admin\AppData\Local\Temp\28399ac361d0f52d9585c25546199bb48d02df8c56a732d99c5e9347752b215e.exe"
1⤵
PID:2344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2344-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2344-1-0x0000000000A50000-0x0000000000B50000-memory.dmp

Filesize
1024KB

Download
memory/2344-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2344-5-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2344-4-0x0000000000400000-0x00000000005ED000-memory.dmp

Filesize
1.9MB

Download