smokeloader | cb1d7d603c7c9e6ef4ba096fa4fc2165c8c9531f5a966fc0262fff8ec6a8aa3d | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
12-11-2024 06:07

Sharing

Report Analysis Logs

General

Target

2ac0e22f00d606bdcb2595cd5fe9c6a7427596b2e31c3e6e306306e46516424aN.exe
Size

251KB
MD5

224a04928d686ab2b0b448b7218cb75d
SHA1

3e78673655017d35c2a883067f6858b6d49c58cb
SHA256

cb1d7d603c7c9e6ef4ba096fa4fc2165c8c9531f5a966fc0262fff8ec6a8aa3d
SHA512

1e5a9fb93b4d8616e661c6975f3059ea0b03a0128edf30403389d7981b0618bfd366aaa85e608efbadcef963eb1131c6ace2c9fc9d534c2ace05f9fe64f0e104
SSDEEP

3072:eO/w0JkkDmQO7vB5YZzknf/STgRWfI5dp4zulWg:puvY2nf/I6E8l

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\2ac0e22f00d606bdcb2595cd5fe9c6a7427596b2e31c3e6e306306e46516424aN.exe
"C:\Users\Admin\AppData\Local\Temp\2ac0e22f00d606bdcb2595cd5fe9c6a7427596b2e31c3e6e306306e46516424aN.exe"
1⤵
PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2360-1-0x0000000000290000-0x0000000000390000-memory.dmp

Filesize
1024KB

Download
memory/2360-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2360-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2360-5-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download
memory/2360-6-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download