smokeloader | de74bd2a1d74bfb4f73d97a1e652c2a5bd778ae108df31ede4dd96950485118c | Triage

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18-09-2024 15:18

Sharing

Report Analysis Logs

General

Target

file.exe
Size

227KB
MD5

a7d7d48f4a9bb7718ec17d11fba9cad8
SHA1

748fec11d5becea085af46e8197f42ac9a1e011b
SHA256

de74bd2a1d74bfb4f73d97a1e652c2a5bd778ae108df31ede4dd96950485118c
SHA512

98dda258e460098e79b9aaee795dbd0122f4541f9864fcf71d039ada426dff0fb8540725d779412eea52a6e66d45875665f11961fc7d7d3a2d2be061671e2e25
SSDEEP

3072:E8TNLO/NZxvu9aR10ocAbdyKA5RKuAYcug3JqO9Emf/n:E8TNLO/JiaRGGOAYc5Jq6EmHn

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2080-1-0x00000000009A0000-0x0000000000AA0000-memory.dmp

Filesize
1024KB

Download
memory/2080-2-0x00000000003C0000-0x00000000003CB000-memory.dmp

Filesize
44KB

Download
memory/2080-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2080-4-0x0000000000400000-0x0000000000534000-memory.dmp

Filesize
1.2MB

Download
memory/2080-5-0x00000000003C0000-0x00000000003CB000-memory.dmp

Filesize
44KB

Download