smokeloader | e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3f | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
18-11-2024 22:08

Sharing

Report Analysis Logs

General

Target

e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3fN.exe
Size

251KB
MD5

663db4a468507846b6efe47b08353230
SHA1

4dbb9537bf95eb4bda5abc56faadfabae6697da9
SHA256

e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3f
SHA512

90a0ac8282e25d1606e0be0acf35a331df147940b31f8c4c8a0d84c50493e36b12f7a2f85e7a6cbd89aeddd3ab9c093d3fcc1df7534b91de4fc91d461b6edb6a
SSDEEP

3072:9UfwTzccjEXIh2bBhQ4EDEFBwOmZNx9TQ5xHE94ztlW:+CzcTXnBhgDJOeR9Ev

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3fN.exe
"C:\Users\Admin\AppData\Local\Temp\e9376b2be13e9aa13f3ae86f59a7e43e6af01469c19ad1485782d36cd1a55d3fN.exe"
1⤵
PID:1832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1832-2-0x0000000000290000-0x0000000000390000-memory.dmp

Filesize
1024KB

Download
memory/1832-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1832-4-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download
memory/1832-5-0x0000000000400000-0x0000000002B43000-memory.dmp

Filesize
39.3MB

Download