smokeloader | 425a6adf8d4162b2c23c9fd1cc17411bf76da52a3dd2c146f5e5cd59a2e7322a | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01-10-2024 17:08

Sharing

Report Analysis Logs

General

Target

425a6adf8d4162b2c23c9fd1cc17411bf76da52a3dd2c146f5e5cd59a2e7322aN.exe
Size

424KB
MD5

e42e09e23df6e11cf1aaa72973c3a4c0
SHA1

95980419ca25fae6117069069100680c5f28d8c4
SHA256

425a6adf8d4162b2c23c9fd1cc17411bf76da52a3dd2c146f5e5cd59a2e7322a
SHA512

d04e49dae8bbbac7347d4f20dbe838159aefab16cd889578620117f9f668622f8e3cf6e382326cb56dbbfc0a01b0d9dc1f761330712a5213790de29be4af5bde
SSDEEP

6144:DH9Ihc1dVkWuNZDmo7yDH9XS0Sei5DyQ8pZIiztlGtv2f:DHnZkWuNZeDH9C0tk+Q8XbW

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\425a6adf8d4162b2c23c9fd1cc17411bf76da52a3dd2c146f5e5cd59a2e7322aN.exe
"C:\Users\Admin\AppData\Local\Temp\425a6adf8d4162b2c23c9fd1cc17411bf76da52a3dd2c146f5e5cd59a2e7322aN.exe"
1⤵
PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2564-1-0x0000000000290000-0x0000000000390000-memory.dmp

Filesize
1024KB

Download
memory/2564-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2564-2-0x0000000000400000-0x0000000002482000-memory.dmp

Filesize
32.5MB

Download
memory/2564-4-0x0000000000400000-0x0000000002482000-memory.dmp

Filesize
32.5MB

Download