smokeloader | 0b9d3f694c27f7fc90baf9858b32e84d400cd96ef6c1a16f32343b3f580907fd | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
04-10-2024 00:25

Sharing

Report Analysis Logs

General

Target

0b9d3f694c27f7fc90baf9858b32e84d400cd96ef6c1a16f32343b3f580907fdN.exe
Size

414KB
MD5

47020c00ea3c5051297776a861acf270
SHA1

c797581e7b71775c315efb2cae0aa1d15bec5e31
SHA256

0b9d3f694c27f7fc90baf9858b32e84d400cd96ef6c1a16f32343b3f580907fd
SHA512

fdfbd3a2f83ea357db203530ce3300fdf55e90784e1ca0ec91b6e3716eeef3be2d8bb43f5c50af704ca9744b1953188df2bdb7130666347e869eed7e24721d7d
SSDEEP

6144:IMyi7GPGv9ei2MDoIIwzDapOQx/0X7XnZQ7/u+Iha6F6:bFvki2MDoIIwyZB/u+9

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\0b9d3f694c27f7fc90baf9858b32e84d400cd96ef6c1a16f32343b3f580907fdN.exe
"C:\Users\Admin\AppData\Local\Temp\0b9d3f694c27f7fc90baf9858b32e84d400cd96ef6c1a16f32343b3f580907fdN.exe"
1⤵
PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1900-1-0x0000000002650000-0x0000000002750000-memory.dmp

Filesize
1024KB

Download
memory/1900-2-0x0000000000230000-0x000000000023B000-memory.dmp

Filesize
44KB

Download
memory/1900-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1900-5-0x0000000000230000-0x000000000023B000-memory.dmp

Filesize
44KB

Download
memory/1900-4-0x0000000000400000-0x000000000247F000-memory.dmp

Filesize
32.5MB

Download