smokeloader | d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/11/2024, 23:19

Sharing

Report Analysis Logs

General

Target

d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f.exe
Size

165KB
MD5

53028668f94337794046945928862a98
SHA1

9d6345d0524a7f8f9db20fbb24c6ec19fdbf4a7f
SHA256

d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f
SHA512

ba46370d68678773e117e3b9a8646e38291ebb063eebf902c27b2cb7f095de7ba336f1eae87b46e2e49ccd89231798e75f8b5a85b852282ee3154b283e19375a
SSDEEP

3072:srVMUCkS0t5EWeMHwhZoWC9sI5/DuT61m:UVMkS34HwhZU9sI5/

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f.exe
"C:\Users\Admin\AppData\Local\Temp\d6f779aaaaba924470bb17be5bcf6e765f641d379100240948ade5c498f06c2f.exe"
1⤵
PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2640-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2640-2-0x0000000001EE0000-0x0000000001FE0000-memory.dmp

Filesize
1024KB

Download
memory/2640-4-0x0000000000400000-0x0000000001D77000-memory.dmp

Filesize
25.5MB

Download
memory/2640-5-0x0000000000400000-0x0000000001D77000-memory.dmp

Filesize
25.5MB

Download