smokeloader | 92e9b26ff24fb726595fabf65764b886be693a4a403b8a89d07e6dd3d36acf0a | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06/11/2024, 08:39

Sharing

Report Analysis Logs

General

Target

92e9b26ff24fb726595fabf65764b886be693a4a403b8a89d07e6dd3d36acf0a.exe
Size

276KB
MD5

3c54544b42885aa7d70a59438d94e319
SHA1

d25641b249e920bf0af01c5516d87f5a20147766
SHA256

92e9b26ff24fb726595fabf65764b886be693a4a403b8a89d07e6dd3d36acf0a
SHA512

a9109a45223b4240bbfd326960e081e5a19472ade4f5e0bbbb64bdd461bf29e128808a299ea1a23c0528a0fe01fc5b617975dd8355236aea23e235e4189ff5fe
SSDEEP

6144:UF9aJyIRUKoeoOaCd6bVgvcCAdUC0edhbWM3c:N4IRvoeOCd6h88U3edla

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\92e9b26ff24fb726595fabf65764b886be693a4a403b8a89d07e6dd3d36acf0a.exe
"C:\Users\Admin\AppData\Local\Temp\92e9b26ff24fb726595fabf65764b886be693a4a403b8a89d07e6dd3d36acf0a.exe"
1⤵
PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2316-1-0x0000000000250000-0x0000000000350000-memory.dmp

Filesize
1024KB

Download
memory/2316-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2316-4-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2316-5-0x0000000000400000-0x00000000023AF000-memory.dmp

Filesize
31.7MB

Download
memory/2316-6-0x0000000000400000-0x00000000023AF000-memory.dmp

Filesize
31.7MB

Download