smokeloader | d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
16-09-2024 14:12

Sharing

Report Analysis Logs

General

Target

6b0969eed91d044d6c30af82c4fe58f0.exe
Size

232KB
MD5

6b0969eed91d044d6c30af82c4fe58f0
SHA1

834e56fdbada1ccddd506fc12eb883155b671281
SHA256

d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f
SHA512

3d5a88cc0b4716a4b126b9c1bc25e41012eade1dccfb0204c7a4a7795a85764aa7e648b27316f35e7bcd52622c199ab6640c3b19cc37f6014ef5293f6b3dd380
SSDEEP

3072:M9PFYSLtMp5olcxWrNJCVSWgOuc5NJu+r7Avo5+IjMKIjGhasGcdhG:mLEelcGOyc5NJSRjGYsGI

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\6b0969eed91d044d6c30af82c4fe58f0.exe
"C:\Users\Admin\AppData\Local\Temp\6b0969eed91d044d6c30af82c4fe58f0.exe"
1⤵
PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2276-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2276-1-0x0000000002960000-0x0000000002A60000-memory.dmp

Filesize
1024KB

Download
memory/2276-4-0x0000000000400000-0x000000000278B000-memory.dmp

Filesize
35.5MB

Download
memory/2276-5-0x0000000000400000-0x000000000278B000-memory.dmp

Filesize
35.5MB

Download