smokeloader | 8fa53853ac6fceed9468512d43d74c59cf2326ef904feecffd3440f6e6ae441c | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-11-2024 14:58

Sharing

Report Analysis Logs

General

Target

b40cf8e538f2c6e214fd1393f9fc5d556a91e6e49d7fc3a855e10b29c69fb185.exe
Size

224KB
MD5

d769e9b86721acecef2b65647405415b
SHA1

bb80cf7977ef76ed31e14aac83ff2c66585e5355
SHA256

b40cf8e538f2c6e214fd1393f9fc5d556a91e6e49d7fc3a855e10b29c69fb185
SHA512

7ed3cd2172f8c31a2116b003ee567379e612b0cceb26b2cfc70021079a8d49e93f1a270b27e166d187d8b11c819a6cd346464c6ceae9b2cfd8ab7066de73b54f
SSDEEP

3072:+KaLDoma5+JWwE7GGewhlriXLiexOmDYg0gdx+eNwD3tdmdhxH:ILEm3kS8WXZxXpxtNi3tm

Score

10^/10

smokeloader 2023 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\b40cf8e538f2c6e214fd1393f9fc5d556a91e6e49d7fc3a855e10b29c69fb185.exe
"C:\Users\Admin\AppData\Local\Temp\b40cf8e538f2c6e214fd1393f9fc5d556a91e6e49d7fc3a855e10b29c69fb185.exe"
1⤵
PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2756-4-0x00000000002B0000-0x00000000002B9000-memory.dmp

Filesize
36KB

Download
memory/2756-2-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/2756-1-0x00000000004D0000-0x00000000005D0000-memory.dmp

Filesize
1024KB

Download
memory/2756-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download