smokeloader | c9df783b54c2a135f1aed03e5bc8910d76b45f86dbc24e5f295ffd6e2fc3cfa0 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
29-08-2024 09:08

Sharing

Report Analysis Logs

General

Target

01e4f31efce4ef63c904d6c60c09edd1.exe
Size

226KB
MD5

01e4f31efce4ef63c904d6c60c09edd1
SHA1

7120a9dacde0369d8df252dc1d3a34b23b614962
SHA256

c9df783b54c2a135f1aed03e5bc8910d76b45f86dbc24e5f295ffd6e2fc3cfa0
SHA512

ffea050545ecdc954386b6d4904ee7251f2a63beb8768d77f0372371e33784da3e31dc52209d2fde7eb246a3c62ec24a2161081dfe56465cefe51940170f7779
SSDEEP

3072:AdHfJldVDKYps9AH+sQjue++mmC2JsHcz1:AdHfJlLpbLoq+6Ys8

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\01e4f31efce4ef63c904d6c60c09edd1.exe
"C:\Users\Admin\AppData\Local\Temp\01e4f31efce4ef63c904d6c60c09edd1.exe"
1⤵
PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2096-2-0x00000000003B0000-0x00000000003BB000-memory.dmp

Filesize
44KB

Download
memory/2096-4-0x0000000000230000-0x0000000000330000-memory.dmp

Filesize
1024KB

Download
memory/2096-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2096-1-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download