smokeloader | 7934699983a5eb47c30dc2aae6848217efcf5c84ce79a711e0b2863290ce6bc6 | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09-11-2024 08:07

Sharing

Report Analysis Logs

General

Target

c7e25075b3d4200b1c9ef102c4c32eb2.exe
Size

236KB
MD5

c7e25075b3d4200b1c9ef102c4c32eb2
SHA1

e0ac9316bfd05f46ad7da13526ec2d5b03202046
SHA256

683f0358815c8f598b1fe8b537e072a515115da4d2e63fcc6e9ffbf61870d3c0
SHA512

8c32854ee4aa14ef5ceb249fe37e13d142c3cc0eb0f23dc10a0b95f6598e87eb5fdf97b5d1d101caf0472e0b3899cf0adf4c56bd96048fe3987f8adb6c22a476
SSDEEP

3072:1Xble7H5QnsEQP6MzIM28KFy9XwHUHgG/Nf5/FEWwYPDpJKJRfeI:NleVXEQiMMM28KA9XLgMNhFaYPDWJ

Score

10^/10

smokeloader sprg backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

sprg

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\c7e25075b3d4200b1c9ef102c4c32eb2.exe
"C:\Users\Admin\AppData\Local\Temp\c7e25075b3d4200b1c9ef102c4c32eb2.exe"
1⤵
PID:2572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2572-1-0x0000000002CC0000-0x0000000002DC0000-memory.dmp

Filesize
1024KB

Download
memory/2572-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2572-4-0x0000000000400000-0x0000000002B94000-memory.dmp

Filesize
39.6MB

Download
memory/2572-5-0x0000000000400000-0x0000000002B94000-memory.dmp

Filesize
39.6MB

Download