smokeloader | 44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21/10/2024, 01:13

Sharing

Report Analysis Logs

General

Target

44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91.exe
Size

367KB
MD5

8f7e3fa4b507ef8114bd09c4c39b40ab
SHA1

79024e1bb20fa1d46b7b135c230010c2720d57e6
SHA256

44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91
SHA512

88249e6c3dac9f08988772e1e6ff6a9703772c164001680865cff43f87531c358b6e6797ee329fb7a7c2f4af5b8aacc52d57f3503dfbc00ab228548be21a6d84
SSDEEP

6144:iJlLY7RbNJFm5JHdf2x/B+Q+FzLk41BFGMtwx+7sVUIHf:ircRbAOx5+/FfkXOG

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91.exe
"C:\Users\Admin\AppData\Local\Temp\44b1d6e0cc054e581350739403e2c9b99e5758bd3da8b10cd087626272d71e91.exe"
1⤵
PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1704-0-0x00000000002C0000-0x00000000002EB000-memory.dmp

Filesize
172KB

Download
memory/1704-1-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1704-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1704-6-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1704-5-0x00000000002C0000-0x00000000002EB000-memory.dmp

Filesize
172KB

Download
memory/1704-4-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1704-3-0x0000000000400000-0x0000000000469000-memory.dmp

Filesize
420KB

Download