smokeloader | b2db9257f44ddcc7d0462b5f9f749084b919add4d568dc78cb179666e0668503 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11-09-2024 17:45

Sharing

Report Analysis Logs

General

Target

b2db9257f44ddcc7d0462b5f9f749084b919add4d568dc78cb179666e0668503.exe
Size

236KB
MD5

bb39744fa136da5b49045ad382f90689
SHA1

5105435e8bda97f45a3b941c0bcc67e0b2be385f
SHA256

b2db9257f44ddcc7d0462b5f9f749084b919add4d568dc78cb179666e0668503
SHA512

649aef2b52192f71e6c4aa3fe9a3e139ee9254fda84edc7ea2dac289027749053324c17fe2e83b5f85abb475c39089c1507e90f603d43a4cff7b0f6fd1ca7b07
SSDEEP

3072:pFS8of+VlxyRmOJvRUNMGN5/plOzMwxA5guQTdzZ/pY0P2tjT4f:0f+VlxyRmRMg/plOwwpuQTdJC0Om

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\b2db9257f44ddcc7d0462b5f9f749084b919add4d568dc78cb179666e0668503.exe
"C:\Users\Admin\AppData\Local\Temp\b2db9257f44ddcc7d0462b5f9f749084b919add4d568dc78cb179666e0668503.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1972-1-0x0000000000230000-0x0000000000330000-memory.dmp

Filesize
1024KB

Download
memory/1972-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1972-4-0x0000000000400000-0x0000000002B5B000-memory.dmp

Filesize
39.4MB

Download
memory/1972-5-0x0000000000400000-0x0000000002B5B000-memory.dmp

Filesize
39.4MB

Download