smokeloader | 0923186058b76b52069af9fd282af6c98766179cbdd524e4d941e0bf44802781 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
03-09-2024 01:06

Sharing

Report Analysis Logs

General

Target

0923186058b76b52069af9fd282af6c98766179cbdd524e4d941e0bf44802781.exe
Size

216KB
MD5

bdaeb131caed57083370b0c24ed030eb
SHA1

c4a00fc122d2015d41c0cf38e00a4711ae05d66d
SHA256

0923186058b76b52069af9fd282af6c98766179cbdd524e4d941e0bf44802781
SHA512

f1b68cb0a01a3771d46d3c9a66823f2e0e93461ed8ecab18f807654fc108b14137980ddc637db1f5b66f74bba86d9929692093ccbab9e6a2072fab9aae904501
SSDEEP

3072:+t7l9Bx/d/vBKjcwALZSpjMiWShrJYhdd/iPga9//qZXXxPrd:ABx/d/vBKjcw0IllYhDVgqZX

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\0923186058b76b52069af9fd282af6c98766179cbdd524e4d941e0bf44802781.exe
"C:\Users\Admin\AppData\Local\Temp\0923186058b76b52069af9fd282af6c98766179cbdd524e4d941e0bf44802781.exe"
1⤵
PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-4-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/2084-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2084-1-0x0000000000610000-0x0000000000710000-memory.dmp

Filesize
1024KB

Download