smokeloader | aff8d33bae045722ffed6e567006c6be52cc55ad1fc79b78ea2f52d55156e30e | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
20-09-2024 01:38

Sharing

Report Analysis Logs

General

Target

aff8d33bae045722ffed6e567006c6be52cc55ad1fc79b78ea2f52d55156e30e.exe
Size

280KB
MD5

6171efb98ce36e0d0f9e6a416c15afb8
SHA1

6c740e01e6e235473c5d7fae6ed6a1ef46335ae4
SHA256

aff8d33bae045722ffed6e567006c6be52cc55ad1fc79b78ea2f52d55156e30e
SHA512

32e74bb14a2a2ca8e76b5883b6d0e36865651fed8e996c3f6ba6f3b42354c8e624bee248d5efe2727af3d5c06e7f3c8abc69990d1939fb9ee8ac1d32413848e7
SSDEEP

6144:gFua96dWR7Q/RiefxoxewWpP0Yoh883sADH0pQDnnTpL5:VaIdWRcpZJoEwgfO3Yp+nTpL

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\aff8d33bae045722ffed6e567006c6be52cc55ad1fc79b78ea2f52d55156e30e.exe
"C:\Users\Admin\AppData\Local\Temp\aff8d33bae045722ffed6e567006c6be52cc55ad1fc79b78ea2f52d55156e30e.exe"
1⤵
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2920-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2920-1-0x0000000002620000-0x0000000002720000-memory.dmp

Filesize
1024KB

Download
memory/2920-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2920-5-0x0000000000400000-0x0000000002460000-memory.dmp

Filesize
32.4MB

Download
memory/2920-6-0x0000000000400000-0x0000000002460000-memory.dmp

Filesize
32.4MB

Download