smokeloader | 1160f56919b5343e19cffdaaa323ba08c47250375f98773e9469398666465dae | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
09-11-2024 20:13

Sharing

Report Analysis Logs

General

Target

d0c09c00990cc693789f83e8dfb4d3e7db62a583d246cea22b2c6bb3a2c3e6f0.exe
Size

184KB
MD5

1d1f1db339f3a24f0d36c55f73170823
SHA1

fc05a397204075db47095fd79c551c1a0c49e1c6
SHA256

d0c09c00990cc693789f83e8dfb4d3e7db62a583d246cea22b2c6bb3a2c3e6f0
SHA512

4fc782dd3c53b8de5496afd320efa0d8f9f3bd96595eadb7b198319176a5109242a91da8179ac0f3ae0432d499262994d5d8db1bd792a4e8a453c6feeedaec51
SSDEEP

3072:LoqvXo/yHi3fSwlOU7Oo1oog2KzDn9DAzz67FWXkf6yYEZV:dvXlCeo1i2KdDAzz6IXo7

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\d0c09c00990cc693789f83e8dfb4d3e7db62a583d246cea22b2c6bb3a2c3e6f0.exe
"C:\Users\Admin\AppData\Local\Temp\d0c09c00990cc693789f83e8dfb4d3e7db62a583d246cea22b2c6bb3a2c3e6f0.exe"
1⤵
PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2172-1-0x00000000002B0000-0x00000000003B0000-memory.dmp

Filesize
1024KB

Download
memory/2172-3-0x0000000000400000-0x00000000004AD000-memory.dmp

Filesize
692KB

Download
memory/2172-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download