smokeloader | 3cb8753735a439dad2d7ab713cde180e9f253c6099ad7a628e1b16564693da0a | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
27-11-2024 07:47

Sharing

Report Analysis Logs

General

Target

a6b9c4690a5631671396f4aa021bd69e_JaffaCakes118.exe
Size

215KB
MD5

a6b9c4690a5631671396f4aa021bd69e
SHA1

641ccf470fac8fb2f9a02ec094a8b91db06a9c6c
SHA256

3cb8753735a439dad2d7ab713cde180e9f253c6099ad7a628e1b16564693da0a
SHA512

e77e141565227fa0a2d9c422a92bd26cdd2c55329d38d1d608eaf2e179354398119740d1cabe46e0df57cbe50ad5070a1eab4cfb5c478d176dc2bc61ec8e1663
SSDEEP

3072:lZJmvn8CoF5ZQSLH4nI619tCdTzY5nIQdFhTTMScsYh6gSVywo3c+:ls/oPZWnr9Cd6bj//7knGyHM

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\a6b9c4690a5631671396f4aa021bd69e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a6b9c4690a5631671396f4aa021bd69e_JaffaCakes118.exe"
1⤵
PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3032-1-0x00000000030D0000-0x00000000031D0000-memory.dmp

Filesize
1024KB

Download
memory/3032-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3032-4-0x0000000000400000-0x0000000002C6C000-memory.dmp

Filesize
40.4MB

Download
memory/3032-5-0x0000000000400000-0x0000000002C6C000-memory.dmp

Filesize
40.4MB

Download