smokeloader | ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
20-09-2024 10:53

Sharing

Report Analysis Logs

General

Target

ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9.exe
Size

228KB
MD5

96410cb83b262dabb95608c6c26c5233
SHA1

9a449b100aa5de4f3dcb8236007ac0aa7a27f00b
SHA256

ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9
SHA512

a9e4e1faa9c4c9ff1b6d4a88be79273936347d86c05ec48afb9889d58d8a7d824f7e3b1c425c09f85cab5d1b64c0e58db8ec2410d1266ca80d05d08f1e75dbe4
SSDEEP

3072:pLoLBpGnKY6VuhizbFRIZ0RMsP7Jo35oCT5+aFVZLwUVZ/csXot4W:pLovWlxhogZBPm

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9.exe
"C:\Users\Admin\AppData\Local\Temp\ec73ce294407ff3abb67d0b0bcb3871d7c54b6984f3c3783eee05254e0852ff9.exe"
1⤵
PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3064-1-0x0000000000660000-0x0000000000760000-memory.dmp

Filesize
1024KB

Download
memory/3064-4-0x0000000000400000-0x0000000000534000-memory.dmp

Filesize
1.2MB

Download
memory/3064-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download