smokeloader | c6010e2ae1484ba9ea7bb17a64b65a18d3c4c8025996478df55c787100b580f0 | Triage

Analysis

max time kernel
115s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12-09-2024 03:50

Sharing

Report Analysis Logs

General

Target

f66071154a2492978eb6e6a5ca7daf20N.exe
Size

415KB
MD5

f66071154a2492978eb6e6a5ca7daf20
SHA1

ec6a898cfcad326fac0f91faa8d930654bf2a57e
SHA256

c6010e2ae1484ba9ea7bb17a64b65a18d3c4c8025996478df55c787100b580f0
SHA512

f4f3ddaf120c2e6652abac7bcdee6198a54911de9b325115b3e121fa2aef5cd766ede56a5c11722ee339e719abad17822cd4bb5572af42c683e96b4cd3068fb4
SSDEEP

6144:PJ42bHEOM5Vlh00PAVUFuf1TRgSqVYIYNNmBzLE:PScHUD00PwUFufd4qIYNND

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\f66071154a2492978eb6e6a5ca7daf20N.exe
"C:\Users\Admin\AppData\Local\Temp\f66071154a2492978eb6e6a5ca7daf20N.exe"
1⤵
PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2732-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2732-1-0x0000000000700000-0x0000000000800000-memory.dmp

Filesize
1024KB

Download
memory/2732-3-0x0000000000400000-0x00000000005FB000-memory.dmp

Filesize
2.0MB

Download
memory/2732-5-0x0000000000400000-0x00000000005FB000-memory.dmp

Filesize
2.0MB

Download
memory/2732-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download