smokeloader | 194d9f1cc306b623a33db91e7867fbe90545f3f24c2315ba08ed1233c942fd31 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08-11-2024 17:15

Sharing

Report Analysis Logs

General

Target

18c6d5ec902169904318f43825aff792b44b35fd0df5c042ba391f716b609518.exe
Size

231KB
MD5

801d35bad81609af210c455e11d2f13d
SHA1

f3e56dde38c5d425d196ab218859a87250c1c0c3
SHA256

18c6d5ec902169904318f43825aff792b44b35fd0df5c042ba391f716b609518
SHA512

95b36568c332e5a812d057a288b880b7161459b9b1474282f7cd843d5ff4c709c979fb00f04dc796098722662f1155f6cdf6e7da471e2eb732f05a8c48b96df9
SSDEEP

3072:Vni+LdxD4qH5W5EWfLv+tU6o+D8wxqUMTOLtJ/33bRS1w7RkxmJZs:V3L3D4qqEQL167jFigJ/7E1GymI

Score

10^/10

smokeloader 2023 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\18c6d5ec902169904318f43825aff792b44b35fd0df5c042ba391f716b609518.exe
"C:\Users\Admin\AppData\Local\Temp\18c6d5ec902169904318f43825aff792b44b35fd0df5c042ba391f716b609518.exe"
1⤵
PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2368-1-0x0000000000540000-0x0000000000640000-memory.dmp

Filesize
1024KB

Download
memory/2368-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2368-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2368-4-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download