smokeloader | 54f1ee760576ea9a7bf2018d8b6ab2f3c1d218e5e4d7784dbbe240a83178d53c | Triage

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19-09-2024 21:15

Sharing

Report Analysis Logs

General

Target

54f1ee760576ea9a7bf2018d8b6ab2f3c1d218e5e4d7784dbbe240a83178d53cN.exe
Size

341KB
MD5

3d5f436d48ae07710617c314f32a7820
SHA1

fd0c3663e81d93e9eb0923a4a1c4641be40c5cb3
SHA256

54f1ee760576ea9a7bf2018d8b6ab2f3c1d218e5e4d7784dbbe240a83178d53c
SHA512

b2a5f547847cf1350e3c4f7e34a8f1c769fddeebd2a754f312a995a39271de0fd5f808d39ae6117393672d59bf86d826425b372824c7fa43d56ca671ecc22f6b
SSDEEP

6144:1wfRnLfd1f8/nHp7axXsnJIadUYmz/n+giQP1w47ofmDDf5L:anLFJ8/Xnu/nXiwef+

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\54f1ee760576ea9a7bf2018d8b6ab2f3c1d218e5e4d7784dbbe240a83178d53cN.exe
"C:\Users\Admin\AppData\Local\Temp\54f1ee760576ea9a7bf2018d8b6ab2f3c1d218e5e4d7784dbbe240a83178d53cN.exe"
1⤵
PID:2716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2716-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2716-1-0x00000000028D0000-0x00000000029D0000-memory.dmp

Filesize
1024KB

Download
memory/2716-3-0x0000000000400000-0x000000000246E000-memory.dmp

Filesize
32.4MB

Download
memory/2716-4-0x0000000000400000-0x000000000246E000-memory.dmp

Filesize
32.4MB

Download