smokeloader | a2b8d4f469a7b8c8900df12569de67f5c8cb68e68177d482ff7ccfe9d580101b | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21-09-2024 01:31

Sharing

Report Analysis Logs

General

Target

a2b8d4f469a7b8c8900df12569de67f5c8cb68e68177d482ff7ccfe9d580101b.exe
Size

270KB
MD5

55cf0ba0a65d11eee638b11ba9e2f3a1
SHA1

a34d2eca33a11ee443675788174220984963be47
SHA256

a2b8d4f469a7b8c8900df12569de67f5c8cb68e68177d482ff7ccfe9d580101b
SHA512

474f6edd85755b256e23f1168f460516385f1adda62604e37bd95339c526ee81077854c6aaf171db0420173fd3eeb371070173f8036a106f3b28c5bf96fcfd67
SSDEEP

6144:tDN0YXMIebj1xc/2K1OIoZ8yruBSXMPoiHzWZVfPybyX86EsUY:t+/IebS2sOZZ8yruBSXMPohPyi8j

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\a2b8d4f469a7b8c8900df12569de67f5c8cb68e68177d482ff7ccfe9d580101b.exe
"C:\Users\Admin\AppData\Local\Temp\a2b8d4f469a7b8c8900df12569de67f5c8cb68e68177d482ff7ccfe9d580101b.exe"
1⤵
PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2692-1-0x0000000000400000-0x000000000245D000-memory.dmp

Filesize
32.4MB

Download
memory/2692-4-0x0000000000400000-0x000000000245D000-memory.dmp

Filesize
32.4MB

Download
memory/2692-3-0x00000000003A0000-0x00000000003AB000-memory.dmp

Filesize
44KB

Download
memory/2692-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2692-5-0x0000000000400000-0x000000000245D000-memory.dmp

Filesize
32.4MB

Download