smokeloader | 03d00112c73404cd29f4eb191574376b580a1c1cf38560d07e988ccea2006e3e | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
24-09-2024 06:13

Sharing

Report Analysis Logs

General

Target

03d00112c73404cd29f4eb191574376b580a1c1cf38560d07e988ccea2006e3e.exe
Size

396KB
MD5

34e07317817ca03f5eb4566851fe0cf3
SHA1

53aa6a1e3ca6e956c33f2b217649977aa1bb7ac3
SHA256

03d00112c73404cd29f4eb191574376b580a1c1cf38560d07e988ccea2006e3e
SHA512

e1ffd55fc67a20a0cd6cdff4f8e555c88d9c9f4484de063a963ffa728bb30d850ac806d5bdca24e9c9b536e9e3a7bc7f46e0e364bd9442f6dd8fccbf61bf1508
SSDEEP

6144:nZyOrEyRLH0Gdi7xFUaxU/zhCISmlIVkBAUFNFfZnln5eOOl8:n4OrLRLH87xFUacMISmIknBnlQd8

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\03d00112c73404cd29f4eb191574376b580a1c1cf38560d07e988ccea2006e3e.exe
"C:\Users\Admin\AppData\Local\Temp\03d00112c73404cd29f4eb191574376b580a1c1cf38560d07e988ccea2006e3e.exe"
1⤵
PID:2736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2736-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2736-1-0x00000000025D0000-0x00000000026D0000-memory.dmp

Filesize
1024KB

Download
memory/2736-4-0x0000000000400000-0x000000000247B000-memory.dmp

Filesize
32.5MB

Download
memory/2736-5-0x0000000000400000-0x000000000247B000-memory.dmp

Filesize
32.5MB

Download