smokeloader | fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe | Triage

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01-10-2024 21:20

Sharing

Report Analysis Logs

General

Target

file.exe
Size

389KB
MD5

007fa2c8c8ab1fbc6867e44db35c063e
SHA1

fcd9e6754030070ae97a9cb6cfae9178c785f545
SHA256

fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe
SHA512

988187be4b97ed4d45e7a0b72986f8ff07891e9b8c4014a0d882e96350487632e95902834520df3dc13d21762e282f9ffc9748fe5061f39401766d075907e308
SSDEEP

6144:yB5v9Z13FO0jL/cyv3+Is7RIw0k2aBh4MCU0m9ccVr:CVRjL/cs3fsiEh4MCjm9/

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2752-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2752-2-0x0000000002630000-0x0000000002730000-memory.dmp

Filesize
1024KB

Download
memory/2752-1-0x0000000000400000-0x0000000002479000-memory.dmp

Filesize
32.5MB

Download
memory/2752-4-0x0000000000400000-0x0000000002479000-memory.dmp

Filesize
32.5MB

Download