smokeloader | 1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19-09-2024 01:08

Sharing

Report Analysis Logs

General

Target

1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45.exe
Size

228KB
MD5

85e148bd1d422ce970d87628fbf351ea
SHA1

e1ee87938cd159916e904980aff9b031637d30c0
SHA256

1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45
SHA512

163805ea52499e694c9e7767aadbea6004950f43a3d72459fbd8bc1b084273e252aa6546ae74a96f36efad5fa7fb60db9f36d4af90d39885e31e88d613ae891f
SSDEEP

3072:WdoLovr0yE03B3Kq16flK8sAQ18s7TVyC5qKuAYcuetO9Emf/n:hLovWAZKq14l5sAQCAYcL6EmHn

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45.exe
"C:\Users\Admin\AppData\Local\Temp\1f527c33a9a07976aee7a744579f7efe6ca704660c4b1d8c86e138cfe9000c45.exe"
1⤵
PID:2308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2308-2-0x0000000000620000-0x0000000000720000-memory.dmp

Filesize
1024KB

Download
memory/2308-1-0x0000000000400000-0x0000000000534000-memory.dmp

Filesize
1.2MB

Download
memory/2308-4-0x0000000000400000-0x0000000000534000-memory.dmp

Filesize
1.2MB

Download
memory/2308-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download