smokeloader | b67593dbba8113692794b340bcbf91a8f6ecd17afa359619cfb8c9d7a038ee8a | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
08-11-2024 20:05

Sharing

Report Analysis Logs

General

Target

e5147ae13310b2b93da17d2800a21956788671c907f7dd19a3918c0b9fcc051b.exe
Size

300KB
MD5

092bc2c227db1bb7bc32a047092d27c9
SHA1

b5e671d3e050c5f27ab45443047619bd3eed28bf
SHA256

e5147ae13310b2b93da17d2800a21956788671c907f7dd19a3918c0b9fcc051b
SHA512

7343571a104619a315823f818a67eeed32b2ae7834b3c06de1671de18d09df103c8db7e9c7d41e5f1dd632a0cea53e446c94816ce978ff876bb8edc35c2d3f4c
SSDEEP

3072:Zov4S9LXS589ZUkA2JL9CKEUDeb44td76gZNP1lV09KSDxNlfEd542:+vDL00ZZiKEUDedtd+oNPsDbgJ

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\e5147ae13310b2b93da17d2800a21956788671c907f7dd19a3918c0b9fcc051b.exe
"C:\Users\Admin\AppData\Local\Temp\e5147ae13310b2b93da17d2800a21956788671c907f7dd19a3918c0b9fcc051b.exe"
1⤵
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1724-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1724-2-0x0000000002CD0000-0x0000000002DD0000-memory.dmp

Filesize
1024KB

Download
memory/1724-1-0x0000000000400000-0x0000000002B0F000-memory.dmp

Filesize
39.1MB

Download
memory/1724-4-0x0000000000400000-0x0000000002B0F000-memory.dmp

Filesize
39.1MB

Download
memory/1724-5-0x0000000000400000-0x0000000002B0F000-memory.dmp

Filesize
39.1MB

Download