smokeloader | 085c122ecc793c0609baaf97b641039c0b31709ca659e39f3b3bcbbd1243f23e | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05-11-2024 07:32

Sharing

Report Analysis Logs

General

Target

085c122ecc793c0609baaf97b641039c0b31709ca659e39f3b3bcbbd1243f23e.exe
Size

127KB
MD5

311022377f3c9437f3a843f7ef264733
SHA1

d2ed344b8ceb580312f881af4b7080e7b12fc2aa
SHA256

085c122ecc793c0609baaf97b641039c0b31709ca659e39f3b3bcbbd1243f23e
SHA512

c04a8aec66563275c14c8b8e625f76375d40b1cc07367d04873761d3df695f8c72e28e9240d062af689191057611aa6893c08182b2a0059706bbdff51e3e8189
SSDEEP

3072:r7NCaM15MxlwxMY+wY8rsjCXrqfP5EgtSQz:fNI5MYU14KmqfRELC

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\085c122ecc793c0609baaf97b641039c0b31709ca659e39f3b3bcbbd1243f23e.exe
"C:\Users\Admin\AppData\Local\Temp\085c122ecc793c0609baaf97b641039c0b31709ca659e39f3b3bcbbd1243f23e.exe"
1⤵
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2232-1-0x0000000000600000-0x0000000000700000-memory.dmp

Filesize
1024KB

Download
memory/2232-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2232-4-0x0000000000400000-0x00000000004A6000-memory.dmp

Filesize
664KB

Download
memory/2232-5-0x0000000000400000-0x00000000004A6000-memory.dmp

Filesize
664KB

Download