smokeloader | dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
20-09-2024 01:47

Sharing

Report Analysis Logs

General

Target

dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69.exe
Size

282KB
MD5

56e3db9291d886a337ba3d4a12828bca
SHA1

a1ad3b87d4d58ee9a77d51cc23b3ea775c7c0a93
SHA256

dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69
SHA512

1f2e29283a0ea3b921e0794e989d56eae0f01709b350b16a717840dd1d362354cfaa611729fa148b102f6cbca89ef6bfc3ece9334140044ee0eda912e9ca4c41
SSDEEP

6144:JF6xjwQaVe02c6drGhPby5TVnm+pzpj3Iin:2lwQaIJVIy5hnppzOi

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69.exe
"C:\Users\Admin\AppData\Local\Temp\dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69.exe"
1⤵
PID:1272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1272-1-0x0000000002540000-0x0000000002640000-memory.dmp

Filesize
1024KB

Download
memory/1272-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1272-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1272-5-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1272-4-0x0000000000400000-0x0000000002460000-memory.dmp

Filesize
32.4MB

Download