smokeloader | f6307cd6709615693bb8646ad25e234f2669f0fc9739bca4f3f5be3629fd62d7 | Triage

Analysis

max time kernel
69s
max time network
21s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
17-09-2024 03:58

Sharing

Report Analysis Logs

General

Target

f6307cd6709615693bb8646ad25e234f2669f0fc9739bca4f3f5be3629fd62d7N.exe
Size

30KB
MD5

0a16eaadd24c6a1ff27bb71c6c618d20
SHA1

8edfcfe7a157e94eaa4461d6e0a6ea6b6c943b57
SHA256

f6307cd6709615693bb8646ad25e234f2669f0fc9739bca4f3f5be3629fd62d7
SHA512

1be22b1fec04c2ac43d4f1d78e783af5a972160d5e42bc370ff92f92937374e0f1b93a6f9961e5dcffd5876dc1c6c9a2dd6fa46042ed7d906cc23e1e9580d1e5
SSDEEP

768:No0eDWcmheEz/h4r4Pyuh6mUiY4kojCVnkaN+qSmU:No0ehfG/44lNU4koGnko

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\f6307cd6709615693bb8646ad25e234f2669f0fc9739bca4f3f5be3629fd62d7N.exe
"C:\Users\Admin\AppData\Local\Temp\f6307cd6709615693bb8646ad25e234f2669f0fc9739bca4f3f5be3629fd62d7N.exe"
1⤵
PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2996-1-0x0000000000400000-0x0000000000408207-memory.dmp

Filesize
32KB

Download
memory/2996-0-0x0000000000400000-0x0000000000408207-memory.dmp

Filesize
32KB

Download