smokeloader | 2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844 | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02-10-2024 01:07

Sharing

Report Analysis Logs

General

Target

2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844.exe
Size

361KB
MD5

eead7a529f768cd0a74a639ff806357c
SHA1

5fea9c1f649f81dfca7f19af1cabc8aab2b01829
SHA256

2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844
SHA512

dd28fb4dcbba20b72e7fb36c2d947a99a8dffe76d52460d52143992aa98bf0c7ee41cfa9e59fb7d0a7ca3c598b0924254e9764168f5f8031f3bb920f60d562e5
SSDEEP

6144:o1JYtwjCacpD0fbtNorAJoKURDOT42P12YO5LqxuGG8eskEGtwc:Ui2jCacpofbtNRJoSHbkGVGtw

Score

10^/10

smokeloader pub2 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub2

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844.exe
"C:\Users\Admin\AppData\Local\Temp\2c84b412d0ab9a058d88e5b34e0921c06da1ba11703ef71c124050406dad1844.exe"
1⤵
PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3028-1-0x0000000000290000-0x0000000000390000-memory.dmp

Filesize
1024KB

Download
memory/3028-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/3028-2-0x0000000000400000-0x0000000002471000-memory.dmp

Filesize
32.4MB

Download
memory/3028-4-0x0000000000400000-0x0000000002471000-memory.dmp

Filesize
32.4MB

Download