smokeloader | 90d3dfef1cc0e74c65f9597e3a110185994afb753b23d3b42cfe77e3d36fadcf | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14-09-2024 00:37

Sharing

Report Analysis Logs

General

Target

fagwgje.exe
Size

231KB
MD5

c50c50adc333e35cd41028fe767b0b27
SHA1

05c8ebb55fd5f573ffbfd4419ce1335305cf07f2
SHA256

90d3dfef1cc0e74c65f9597e3a110185994afb753b23d3b42cfe77e3d36fadcf
SHA512

67710cff3637673d387c8db07228e9c5a35212bb2f7bb23fe37f66890aada371f8f986adde0c50b80f882a2a4af01b6157d92412282c9c13b012d0360cc01b38
SSDEEP

3072:ZaAydvFfb2JUIhmx/BuI1N3GDvIjMKIj/GAanG:Q5vFfbCUmmx/BuuyRj/GTn

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\fagwgje.exe
"C:\Users\Admin\AppData\Local\Temp\fagwgje.exe"
1⤵
PID:2104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2104-1-0x00000000028C0000-0x00000000029C0000-memory.dmp

Filesize
1024KB

Download
memory/2104-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2104-2-0x0000000000230000-0x000000000023B000-memory.dmp

Filesize
44KB

Download
memory/2104-5-0x0000000000230000-0x000000000023B000-memory.dmp

Filesize
44KB

Download
memory/2104-4-0x0000000000400000-0x000000000278A000-memory.dmp

Filesize
35.5MB

Download