smokeloader | d9c09637a217f21610dd0e68a20d25d79769d2aae308cb4737741a7537c310fb | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03-09-2024 15:13

Sharing

Report Analysis Logs

General

Target

dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d.exe
Size

29KB
MD5

e5453104d30224ac773e12cdb6aa2e35
SHA1

4eba4f3a85e3c627d8e06145abf9ca1b4983b128
SHA256

dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d
SHA512

814ea0a2d15d5ac5cd79a0362a61e03613061e8ff493ce5165c98dc0d2a04184b16abe10a4c1eee4f31c1f08e81ef67db475a5e7ff10ea6476e8252b801e24ba
SSDEEP

384:bs+R5mGiTFPYRhebJwkRrVoPGZXYgCGzLzXB1OMZzDJEPGYvdbiWmAnw3/DIN9r:4AQjHJrVrCurBP5DJav9LvUe9E

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d.exe
"C:\Users\Admin\AppData\Local\Temp\dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d.exe"
1⤵
PID:1868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1868-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1868-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download