smokeloader | 6315393be303ea65be6ff1c60814cbcba5cd8e51fdf07da4373d0599c8fb8ce7 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-11-2024 23:11

Sharing

Report Analysis Logs

General

Target

a041839327295fde3df12ea61374abd19c4499b87e211757c593179d6a6870d1.exe
Size

255KB
MD5

7fdba86bba0508054fd1f058a6a2d134
SHA1

131aa6889c55b9348a452fdf369fe54c2f05ba48
SHA256

a041839327295fde3df12ea61374abd19c4499b87e211757c593179d6a6870d1
SHA512

901b368bf99f8b715186d22d73bbb80a87f8498fd375b9023d798651f5c0939d01d3ec3ec50ce148699b6228aca59711883e9a30e986c1c5d18e95e8ab1967f1
SSDEEP

6144:VU8vCLXBfoCmgZw6NNTs9VUkIqj8m+z7:VU8apkQw6N6LUkpv+z7

Score

10^/10

smokeloader backdoor trojan

Malware Config

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\a041839327295fde3df12ea61374abd19c4499b87e211757c593179d6a6870d1.exe
"C:\Users\Admin\AppData\Local\Temp\a041839327295fde3df12ea61374abd19c4499b87e211757c593179d6a6870d1.exe"
1⤵
PID:876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/876-1-0x0000000002CD0000-0x0000000002DD0000-memory.dmp

Filesize
1024KB

Download
memory/876-2-0x0000000000220000-0x0000000000229000-memory.dmp

Filesize
36KB

Download
memory/876-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/876-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/876-5-0x0000000000220000-0x0000000000229000-memory.dmp

Filesize
36KB

Download
memory/876-4-0x0000000000400000-0x0000000002C2E000-memory.dmp

Filesize
40.2MB

Download