smokeloader | 0c14a45176cba8063c34c6e3bc929146c34b580fc9b13a6a554e0f356936914c | Triage

Analysis

max time kernel
16s
max time network
22s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-11-2024 21:11

Sharing

Report Analysis Logs

General

Target

0c14a45176cba8063c34c6e3bc929146c34b580fc9b13a6a554e0f356936914c.exe
Size

253KB
MD5

fd01543a651ef436e4282c3995b017c7
SHA1

a93cd08de82f768e465805eb83114d0c275be254
SHA256

0c14a45176cba8063c34c6e3bc929146c34b580fc9b13a6a554e0f356936914c
SHA512

8e475d4a828008ff2a0c9268841716d64e72862552e6b51f39bce756f80c6df75e646032eba710ccab9b2bc421638647f6864d0349c325c50540fef30970b2ee
SSDEEP

1536:4NmzTvn2nifu85rXqBL8c7YLD7fLQgb50M7g6HK2wUOh60b2sxodCmK56/35tr85:48/vfE8fQLfvRb2lm56/35dhhBRyDDr

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\0c14a45176cba8063c34c6e3bc929146c34b580fc9b13a6a554e0f356936914c.exe
"C:\Users\Admin\AppData\Local\Temp\0c14a45176cba8063c34c6e3bc929146c34b580fc9b13a6a554e0f356936914c.exe"
1⤵
PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1764-1-0x0000000002BF0000-0x0000000002CF0000-memory.dmp

Filesize
1024KB

Download
memory/1764-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1764-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1764-5-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download
memory/1764-6-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download