smokeloader | e5c276cc8d54536b28f05b777f108b336d9f78f1671946bdc24c89a318440589 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-11-2024 13:10

Sharing

Report Analysis Logs

General

Target

1255496e34ab9f82c4cf9267b0b023362849c29d.exe
Size

323KB
MD5

bf7a142abf83963246d519d381d0c223
SHA1

1255496e34ab9f82c4cf9267b0b023362849c29d
SHA256

e5c276cc8d54536b28f05b777f108b336d9f78f1671946bdc24c89a318440589
SHA512

4563f023f55de306dc4bb5c04565accf1a7460d1a6c3c083f7adc291ff9bc2cad24a8813300a60aeadb4884537e201970513ed092223f3f9dcefb9fe5043b631
SSDEEP

6144:c8fnvKs7oT6oBaDP5pf8qZ50WP7ITsq4:c8PvK2odYXn0e75

Score

10^/10

smokeloader oct backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\1255496e34ab9f82c4cf9267b0b023362849c29d.exe
"C:\Users\Admin\AppData\Local\Temp\1255496e34ab9f82c4cf9267b0b023362849c29d.exe"
1⤵
PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1416-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1416-1-0x0000000002D50000-0x0000000002E50000-memory.dmp

Filesize
1024KB

Download
memory/1416-4-0x0000000000400000-0x0000000002C3E000-memory.dmp

Filesize
40.2MB

Download
memory/1416-5-0x0000000000400000-0x0000000002C3E000-memory.dmp

Filesize
40.2MB

Download