smokeloader | 763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58 | Triage

Analysis

max time kernel
15s
max time network
20s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
20/09/2024, 19:20

Sharing

Report Analysis Logs

General

Target

763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58.exe
Size

282KB
MD5

0106f9ef84b12c021f6162c4cea235e5
SHA1

0f578daf6f177b51afc70773611f2c55b5d5ee8e
SHA256

763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
SHA512

83532853972d39a0c086de6d1b53e803103603f0a330d43d66eaa2ee2fd7a416399578502305fe1818e3147cd50944226b4b20eb86696139f1939003385b2d2f
SSDEEP

6144:xFOxlraju/txlKb0kNDBfFrX3HXYWgHe:6frDnkNRFT0H

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58.exe
"C:\Users\Admin\AppData\Local\Temp\763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58.exe"
1⤵
PID:2656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2656-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2656-2-0x0000000000250000-0x0000000000350000-memory.dmp

Filesize
1024KB

Download
memory/2656-1-0x0000000000400000-0x0000000002460000-memory.dmp

Filesize
32.4MB

Download
memory/2656-4-0x0000000000400000-0x0000000002460000-memory.dmp

Filesize
32.4MB

Download