smokeloader | 0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19/09/2024, 18:23

Sharing

Report Analysis Logs

General

Target

0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b.exe
Size

228KB
MD5

592956e039cd08f94d1512a07c739e8b
SHA1

e5abddc156d45d37a39b229c033b81027d7097d1
SHA256

0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b
SHA512

a66c223ca03bb1e4b574b1e3cce923cfea845d69deb8d32e8c66a6907d74873d5b9bf91f78f173a14fc7899a949794e4ef1c62b559b9d371ec38ceeb12d8bf0f
SSDEEP

3072:NLpJU+quD+6N3yD7Dbv1MjYg+x5kCT5+ar9ewy92cEXot4W:NLpJU+quhy/Db95vSL

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b.exe
"C:\Users\Admin\AppData\Local\Temp\0c573c71018857ee8e140775718fd73a3af1b4e991af1e23262d7eae83180e9b.exe"
1⤵
PID:2256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2256-2-0x00000000002D0000-0x00000000003D0000-memory.dmp

Filesize
1024KB

Download
memory/2256-1-0x0000000000400000-0x0000000000534000-memory.dmp

Filesize
1.2MB

Download
memory/2256-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2256-3-0x00000000001B0000-0x00000000001BB000-memory.dmp

Filesize
44KB

Download
memory/2256-5-0x00000000002D0000-0x00000000003D0000-memory.dmp

Filesize
1024KB

Download