smokeloader | 0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25-10-2024 01:08

Sharing

Report Analysis Logs

General

Target

0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10.exe
Size

232KB
MD5

f45a742212418d4e6134e92289008093
SHA1

22cee4c742a94109452d6189d3d9016090bb5f99
SHA256

0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10
SHA512

865472021601f03176f90bbfad4b0c35e1fdd3de4c0f1b0ab5c00a7f643a3987cb7eaff204c7a17e95c7f1879d97ba463bd4149cb264c81387fa906d8feaf64b
SSDEEP

3072:FlYl4HCHXyrW7J+DP0+NZb55aIUznpE53yi92sm8Q8wcb:FlCsKy09bpa3yi92J8bwc

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader

C:\Users\Admin\AppData\Local\Temp\0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10.exe
"C:\Users\Admin\AppData\Local\Temp\0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10.exe"
1⤵
PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2972-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2972-2-0x00000000005B0000-0x00000000006B0000-memory.dmp

Filesize
1024KB

Download
memory/2972-1-0x0000000000400000-0x0000000000518000-memory.dmp

Filesize
1.1MB

Download
memory/2972-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2972-5-0x00000000005B0000-0x00000000006B0000-memory.dmp

Filesize
1024KB

Download