smokeloader | 338e2378b54f3a94828bc23452f0b6e7bd7f69bc2fb13c618e727feafe61d1ee | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/09/2024, 12:31

Sharing

Report Analysis Logs

General

Target

file.exe
Size

446KB
MD5

23b504ebcc23b1216f95bf578289d648
SHA1

01bdab9d9d491672974198075388cad941372e38
SHA256

338e2378b54f3a94828bc23452f0b6e7bd7f69bc2fb13c618e727feafe61d1ee
SHA512

3441ae4b1e119143fcc433ef53731150eb05a5ac6190c9b13a96386f76ad030cbe83a804abe3bc5f825d6841a98dae71646688599f5cf05dbe0b669a52f7944c
SSDEEP

6144:3Ba9JaOIl9S0CkEjkXuARDWoQpLz1LiHTlXb55FXCnFk:3cXaO+SteXuGVQ9z1LiHBrpSC

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3024-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/3024-1-0x0000000002570000-0x0000000002670000-memory.dmp

Filesize
1024KB

Download
memory/3024-4-0x0000000000400000-0x0000000002488000-memory.dmp

Filesize
32.5MB

Download
memory/3024-5-0x0000000000400000-0x0000000002488000-memory.dmp

Filesize
32.5MB

Download