smokeloader | 84480298736b3a29942f92f86e487dc3caf76447ea16ba4261175d039b998c55 | Triage

Analysis

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11-11-2024 23:18

Sharing

Report Analysis Logs

General

Target

84480298736b3a29942f92f86e487dc3caf76447ea16ba4261175d039b998c55.exe
Size

251KB
MD5

568cc4bef20cfdd2abbf05180bf67755
SHA1

fc1c7bbdbfb6e3848bf65f17e61a299cad44274c
SHA256

84480298736b3a29942f92f86e487dc3caf76447ea16ba4261175d039b998c55
SHA512

dbc142b6459c1d1df075c122b1e7dfe7ee872f2726f1404e7ce7a80a23eea53d4f92fc79b8ff63ab3644f4c3016eea2175b5da78ede8d572cfbb8d167f52da28
SSDEEP

3072:eO/w0JkkDmQO7vB5YZzknf/STgRWfI5dp4zulWV:puvY2nf/I6E84

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\84480298736b3a29942f92f86e487dc3caf76447ea16ba4261175d039b998c55.exe
"C:\Users\Admin\AppData\Local\Temp\84480298736b3a29942f92f86e487dc3caf76447ea16ba4261175d039b998c55.exe"
1⤵
PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1996-1-0x0000000002CF0000-0x0000000002DF0000-memory.dmp

Filesize
1024KB

Download
memory/1996-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1996-2-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download
memory/1996-4-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download