smokeloader | e47e077edaa9d362444467c0b6cbce82ffb7dda75a1aa58d9e7019ca366d586e | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10-11-2024 15:26

Sharing

Report Analysis Logs

General

Target

e47e077edaa9d362444467c0b6cbce82ffb7dda75a1aa58d9e7019ca366d586e.exe
Size

184KB
MD5

d22ace640c08a8a99ec0483594be87c7
SHA1

fc1b84cc90c6a5499b98e537baa719a70aed3f33
SHA256

e47e077edaa9d362444467c0b6cbce82ffb7dda75a1aa58d9e7019ca366d586e
SHA512

ec90a5aa4ec60f6e598cedc362f70a5d83ab42eaf0e0f6d180f42bdb1ab9daa1535ad57b7fb4d9e0982dd7424ef08a056fa2f023022cd047955b69151de31f92
SSDEEP

3072:WAtj+e5K8Qrg9s9liM5ZfFqwIu3f5Dm3J/pYp0R:lq77iM5ZfowIu3f4l

Score

10^/10

smokeloader oct backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

oct

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\e47e077edaa9d362444467c0b6cbce82ffb7dda75a1aa58d9e7019ca366d586e.exe
"C:\Users\Admin\AppData\Local\Temp\e47e077edaa9d362444467c0b6cbce82ffb7dda75a1aa58d9e7019ca366d586e.exe"
1⤵
PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2644-1-0x00000000006B0000-0x00000000007B0000-memory.dmp

Filesize
1024KB

Download
memory/2644-2-0x0000000000400000-0x0000000000593000-memory.dmp

Filesize
1.6MB

Download
memory/2644-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2644-4-0x0000000000400000-0x0000000000593000-memory.dmp

Filesize
1.6MB

Download