smokeloader | 822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
03-09-2024 01:58

Sharing

Report Analysis Logs

General

Target

822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87.exe
Size

411KB
MD5

9753b8ad3204443226a2b298da8242be
SHA1

60c61650311944accdaf8fb78bca663d8cdde241
SHA256

822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87
SHA512

b5a808f0f8e3f1e7e61d99514809606c8d3b12f50bbbb9891967aee020cbbdcaf026ed86dcc11262b5c2e9d5ff19cd1e420fe971e4110ee7bb474dbdac77004a
SSDEEP

6144:KsL00ZALltugI4avTmF1Y58qg3h58A9rFo:KORZALltIm28d3hOAw

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87.exe
"C:\Users\Admin\AppData\Local\Temp\822d4a0dc03fa0348fc8a12c3e0c3c10ad433abbf34f858b64406beaf8606d87.exe"
1⤵
PID:1432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1432-4-0x0000000000400000-0x00000000005F9000-memory.dmp

Filesize
2.0MB

Download
memory/1432-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1432-2-0x0000000000A60000-0x0000000000B60000-memory.dmp

Filesize
1024KB

Download