smokeloader | d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
17-09-2024 01:36

Sharing

Report Analysis Logs

General

Target

d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe
Size

232KB
MD5

6b0969eed91d044d6c30af82c4fe58f0
SHA1

834e56fdbada1ccddd506fc12eb883155b671281
SHA256

d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f
SHA512

3d5a88cc0b4716a4b126b9c1bc25e41012eade1dccfb0204c7a4a7795a85764aa7e648b27316f35e7bcd52622c199ab6640c3b19cc37f6014ef5293f6b3dd380
SSDEEP

3072:M9PFYSLtMp5olcxWrNJCVSWgOuc5NJu+r7Avo5+IjMKIjGhasGcdhG:mLEelcGOyc5NJSRjGYsGI

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe
"C:\Users\Admin\AppData\Local\Temp\d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe"
1⤵
PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2220-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2220-2-0x00000000001B0000-0x00000000001BB000-memory.dmp

Filesize
44KB

Download
memory/2220-4-0x0000000000400000-0x000000000278B000-memory.dmp

Filesize
35.5MB

Download
memory/2220-5-0x0000000000400000-0x000000000278B000-memory.dmp

Filesize
35.5MB

Download