smokeloader | fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02-10-2024 01:44

Sharing

Report Analysis Logs

General

Target

fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe.exe
Size

389KB
MD5

007fa2c8c8ab1fbc6867e44db35c063e
SHA1

fcd9e6754030070ae97a9cb6cfae9178c785f545
SHA256

fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe
SHA512

988187be4b97ed4d45e7a0b72986f8ff07891e9b8c4014a0d882e96350487632e95902834520df3dc13d21762e282f9ffc9748fe5061f39401766d075907e308
SSDEEP

6144:yB5v9Z13FO0jL/cyv3+Is7RIw0k2aBh4MCU0m9ccVr:CVRjL/cs3fsiEh4MCjm9/

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe.exe
"C:\Users\Admin\AppData\Local\Temp\fde9a151f01aaa4bd10355337c8146e28c0716f10a4bdd70718f007f321827fe.exe"
1⤵
PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1964-1-0x0000000002630000-0x0000000002730000-memory.dmp

Filesize
1024KB

Download
memory/1964-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1964-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1964-5-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1964-4-0x0000000000400000-0x0000000002479000-memory.dmp

Filesize
32.5MB

Download