smokeloader | 9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da | Triage

Analysis

max time kernel
14s
max time network
18s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
22-11-2024 15:30

Sharing

Report Analysis Logs

General

Target

9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da.exe
Size

144KB
MD5

8ad2bfb643efdd7b8d0f2387f5d9f763
SHA1

002f6c2f25701d8fc2936b3cb628a2f36c11b58c
SHA256

9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da
SHA512

e70a26a0b631cf3a65749e8a0b5e59ebfd3595c063a25e06e91572155c066b8276109203fd14f61e131b75134a0160bdf19a5f07319a02345b6ce07c80303e60
SSDEEP

1536:Uk0JAbV7srPwPhk28mcL4Y/PKOMarYXUIflChgBM1qjl0O8sYc5WOmQjxkxKIj:UnuxaQ8/tHhIfl0gi1I0MYc5W86

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da.exe
"C:\Users\Admin\AppData\Local\Temp\9e810dc6ce66ed2353a0058bca438199a58f6c9d62746c4181a6f5d898f790da.exe"
1⤵
PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2440-2-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2440-1-0x0000000002310000-0x0000000002410000-memory.dmp

Filesize
1024KB

Download
memory/2440-3-0x0000000000400000-0x0000000002142000-memory.dmp

Filesize
29.3MB

Download
memory/2440-4-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2440-5-0x0000000000400000-0x0000000002142000-memory.dmp

Filesize
29.3MB

Download