smokeloader | 07439f8a2adbe031b3b1f4bca85a8f8e99dfac6499ec6f9261d3c01d7a744bb6 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
25-09-2024 09:59

Sharing

Report Analysis Logs

General

Target

file.exe
Size

408KB
MD5

51636e7775782f91df225f511b297f96
SHA1

bd338186079c1afd2750416c02b8650dbb6e463a
SHA256

07439f8a2adbe031b3b1f4bca85a8f8e99dfac6499ec6f9261d3c01d7a744bb6
SHA512

5f7e765cae4a507227caa97e68757d777c1af7b58482e669da5ee5adb200abbaaa05a079e5101feb370f7c8cbd56a99bdcdd1426d1b2d504758c9b6b41de0b79
SSDEEP

6144:D4SOx32ux+Zzo97tIDEjTI3+bOFNnPDqbc3Io/LTJWXvbMvquO52T3:BOxLx+Zk9paHNPDqbdo/LdWfbMCuYA

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
PID:1200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1200-1-0x00000000025A0000-0x00000000026A0000-memory.dmp

Filesize
1024KB

Download
memory/1200-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1200-4-0x0000000000400000-0x000000000247E000-memory.dmp

Filesize
32.5MB

Download
memory/1200-5-0x0000000000400000-0x000000000247E000-memory.dmp

Filesize
32.5MB

Download