smokeloader | 7ae34a91c89b931374991f301aac8170883202b8d2ea9bf7b4a2fb0dc2aeef94 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09-11-2024 19:39

Sharing

Report Analysis Logs

General

Target

a8d57f4ca982b27b286c9c27915928a5030c3c7b0a4d48a6dcf7772b78cf5053.exe
Size

224KB
MD5

49ee4cd49250c8c10d61f5b0a671472e
SHA1

0d029c0d81da465fc58952ec440bf48741bf24e4
SHA256

a8d57f4ca982b27b286c9c27915928a5030c3c7b0a4d48a6dcf7772b78cf5053
SHA512

8efedfcb52ad54425296c286dca3e64bb76ac603ae59f6bac3c09d1732cc8e8c2b9cf8b7b27979e6270e71a86a7d2f33bb72b4a00b60de90caad19a964d41e85
SSDEEP

3072:dDEkT/LAtgI5X9K73sTfPvWY4buNPBiZi10d6auDN9If/ln:RLAKmK73A+YTPEd6aMzi

Score

10^/10

smokeloader 2023 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

2023

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\a8d57f4ca982b27b286c9c27915928a5030c3c7b0a4d48a6dcf7772b78cf5053.exe
"C:\Users\Admin\AppData\Local\Temp\a8d57f4ca982b27b286c9c27915928a5030c3c7b0a4d48a6dcf7772b78cf5053.exe"
1⤵
PID:2748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2748-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2748-4-0x0000000000400000-0x000000000045D000-memory.dmp

Filesize
372KB

Download
memory/2748-2-0x00000000003A0000-0x00000000003A9000-memory.dmp

Filesize
36KB

Download
memory/2748-1-0x0000000000230000-0x0000000000330000-memory.dmp

Filesize
1024KB

Download