smokeloader | 5a9e6a5684dcc534e429359d81d83d3221665a87eafd584649de664d78ea434d | Triage

Analysis

max time kernel
63s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
24-09-2024 23:41

Sharing

Report Analysis Logs

General

Target

488732508af9714616bc7acf2d16f8f7.exe
Size

250KB
MD5

488732508af9714616bc7acf2d16f8f7
SHA1

166f88f419482b4f86a83c1b5041bde5275fc203
SHA256

5a9e6a5684dcc534e429359d81d83d3221665a87eafd584649de664d78ea434d
SHA512

62ecc730c5e7d6fddcf9303e05962a3f12ff2238cc0829d970f9aa9614147f6d81c5f789a07ab90af0b0705a4e9748caf501d446d62edf475f30da6136d463d0
SSDEEP

3072:GSLMNa0RHQqln0ZWeZh7mw6GJlSaN2n5bXVYz3M5aWZxZ2HVWaej:GSLMUIHQqlnQThqw6A4ayFYc5aWvYW

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\488732508af9714616bc7acf2d16f8f7.exe
"C:\Users\Admin\AppData\Local\Temp\488732508af9714616bc7acf2d16f8f7.exe"
1⤵
PID:2004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2004-1-0x0000000000660000-0x0000000000760000-memory.dmp

Filesize
1024KB

Download
memory/2004-3-0x0000000000400000-0x000000000053A000-memory.dmp

Filesize
1.2MB

Download
memory/2004-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download