smokeloader | 5f24ea96c1c7ef88d6c4462e1b60aec44cd12ed244dfee6edaa08ed8f29b3879 | Triage

Analysis

max time kernel
19s
max time network
16s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25-09-2024 00:09

Sharing

Report Analysis Logs

General

Target

5f24ea96c1c7ef88d6c4462e1b60aec44cd12ed244dfee6edaa08ed8f29b3879N.exe
Size

422KB
MD5

d3e2aa868fa931cf4e7b2e2e7ed34b60
SHA1

d7b7bb574c0e02143040359bab367bc43d4c5245
SHA256

5f24ea96c1c7ef88d6c4462e1b60aec44cd12ed244dfee6edaa08ed8f29b3879
SHA512

c6100883149d1f162f6b675a6515af0d4e4a1e34b007ff35c37cd3301a083491203920da77f4e7e9ac327df2462a8801d9e7c5b271aae7ce3d4127d22e8ac862
SSDEEP

6144:Kyi4cDEgsKGkAa/l+iJ34y6G1RENvGCQ1KbSf1N71piVbtw:K34cDElKP/l+iJIjGWvGCQxnHc

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\5f24ea96c1c7ef88d6c4462e1b60aec44cd12ed244dfee6edaa08ed8f29b3879N.exe
"C:\Users\Admin\AppData\Local\Temp\5f24ea96c1c7ef88d6c4462e1b60aec44cd12ed244dfee6edaa08ed8f29b3879N.exe"
1⤵
PID:628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/628-1-0x00000000006C0000-0x00000000007C0000-memory.dmp

Filesize
1024KB

Download
memory/628-3-0x0000000000400000-0x00000000005FE000-memory.dmp

Filesize
2.0MB

Download
memory/628-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download