smokeloader | 3afe01534a7b396016185fcbd28aeca02a10bb84c82603286ca663c7b994b3ea | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-09-2024 01:09

Sharing

Report Analysis Logs

General

Target

3afe01534a7b396016185fcbd28aeca02a10bb84c82603286ca663c7b994b3ea.exe
Size

236KB
MD5

87f903e0878c0dae7646a412a4d60e42
SHA1

e846a45862ae97a9ab671e67d22881cec4720dda
SHA256

3afe01534a7b396016185fcbd28aeca02a10bb84c82603286ca663c7b994b3ea
SHA512

012add649f336ea775ed72d91f0d2b78251d24bb9fc958da73e79f58d332b92e4c3a27c7e5a217f9233ff52b8129b2af4c573a51d9c8286d14746245cb50da49
SSDEEP

3072:LacJUV+XiTZS1lG4nlY5RFBPnOyL0u5i1qYIjMKIvGKla8GKlaJalNuCdhG:+cJUVG6Sy4u5BPnOxugRv/z7uW

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\3afe01534a7b396016185fcbd28aeca02a10bb84c82603286ca663c7b994b3ea.exe
"C:\Users\Admin\AppData\Local\Temp\3afe01534a7b396016185fcbd28aeca02a10bb84c82603286ca663c7b994b3ea.exe"
1⤵
PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2452-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2452-2-0x0000000000400000-0x000000000278B000-memory.dmp

Filesize
35.5MB

Download
memory/2452-1-0x0000000002950000-0x0000000002A50000-memory.dmp

Filesize
1024KB

Download
memory/2452-4-0x0000000000400000-0x000000000278B000-memory.dmp

Filesize
35.5MB

Download