smokeloader | 5b2f2b1d325082dca74a21dee02239fd393d2c6df7cbcfeeb1c49cede8b81351 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
26-09-2024 10:18

Sharing

Report Analysis Logs

General

Target

5b2f2b1d325082dca74a21dee02239fd393d2c6df7cbcfeeb1c49cede8b81351.exe
Size

231KB
MD5

da753a479dd54d564152ce9a25a0d588
SHA1

45f1dc4651bb63f23944593496a476a9119429df
SHA256

5b2f2b1d325082dca74a21dee02239fd393d2c6df7cbcfeeb1c49cede8b81351
SHA512

edc4c4fb02d3031320052b3a49ef74c3a7eaa298f711dba6be9a687c99e37c0f43b3cd6a11499272076f917ab67bc4b71403d3ca5e4d5a5b96eb52c82b835c70
SSDEEP

3072:HaAy8gFfZPNuQ2SSAZL2E3yyXck5FQRdDY2nGD4p9rohYP7k6ncVJ:6YgFfZVl2SnZLSkroDProSP7kcy

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\5b2f2b1d325082dca74a21dee02239fd393d2c6df7cbcfeeb1c49cede8b81351.exe
"C:\Users\Admin\AppData\Local\Temp\5b2f2b1d325082dca74a21dee02239fd393d2c6df7cbcfeeb1c49cede8b81351.exe"
1⤵
PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1968-1-0x0000000002860000-0x0000000002960000-memory.dmp

Filesize
1024KB

Download
memory/1968-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1968-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1968-5-0x0000000000400000-0x000000000278A000-memory.dmp

Filesize
35.5MB

Download
memory/1968-6-0x0000000000400000-0x000000000278A000-memory.dmp

Filesize
35.5MB

Download