smokeloader | e5abb3371787fbc9567867a1304cc18624134417480ee5d8d1e4f1d4368cb114 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27/10/2024, 11:25

Sharing

Report Analysis Logs

General

Target

e5abb3371787fbc9567867a1304cc18624134417480ee5d8d1e4f1d4368cb114N.exe
Size

249KB
MD5

32780be68011901e126753d4f213a3c0
SHA1

0dbe799680837608e04c48b722e66ad00a447ad1
SHA256

e5abb3371787fbc9567867a1304cc18624134417480ee5d8d1e4f1d4368cb114
SHA512

3984db75a07e085978b13ac0ead03d6537c7f5ffd938b631e6ce66c042c0aa8ee5d3b0085fa113e50460cba1492928b72d22fca3f2c8e2b5bbc3a94fb4f2d325
SSDEEP

3072:o8LCNar8Hab17xdumIVDQDFmJ+RAU5JXVYz3M5PTsxZ2HVWaej:o8LCUgHmhIVU4JknFYc5PkYW

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\e5abb3371787fbc9567867a1304cc18624134417480ee5d8d1e4f1d4368cb114N.exe
"C:\Users\Admin\AppData\Local\Temp\e5abb3371787fbc9567867a1304cc18624134417480ee5d8d1e4f1d4368cb114N.exe"
1⤵
PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2380-2-0x0000000000650000-0x0000000000750000-memory.dmp

Filesize
1024KB

Download
memory/2380-1-0x0000000000400000-0x000000000053A000-memory.dmp

Filesize
1.2MB

Download
memory/2380-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2380-4-0x0000000000400000-0x000000000053A000-memory.dmp

Filesize
1.2MB

Download