smokeloader | 0599250511b7b3ec63303fa14e98edef3092d61614e07106cf274bd6d43b2451 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
01-09-2024 16:26

Sharing

Report Analysis Logs

General

Target

fd192fb05e0cd219b14c5bf345f33cfb.exe
Size

403KB
MD5

fd192fb05e0cd219b14c5bf345f33cfb
SHA1

fbadb3784b44770045f6c84f3cc2db34e1b6863a
SHA256

0599250511b7b3ec63303fa14e98edef3092d61614e07106cf274bd6d43b2451
SHA512

5fde7dc2658c6c472069cb8aa9a0d7171537f0a27ed087a154a992fdc53ffc1039aa8a0aeaef3591367fbca9dae18ff810784c9d48d567807c85841dba509a5e
SSDEEP

6144:lHansXZYIWhpZ9fRPINs35KM9JtzFreUw+qtR:lH4sXnKp76OsMvtzFr++

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\fd192fb05e0cd219b14c5bf345f33cfb.exe
"C:\Users\Admin\AppData\Local\Temp\fd192fb05e0cd219b14c5bf345f33cfb.exe"
1⤵
PID:2628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2628-1-0x00000000007D0000-0x00000000008D0000-memory.dmp

Filesize
1024KB

Download
memory/2628-2-0x0000000000400000-0x00000000005F7000-memory.dmp

Filesize
2.0MB

Download
memory/2628-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2628-4-0x0000000000400000-0x00000000005F7000-memory.dmp

Filesize
2.0MB

Download