smokeloader | 554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
30-11-2024 03:40

Sharing

Report Analysis Logs

General

Target

554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252N.exe
Size

219KB
MD5

dd3c0d5caa44945b9b9122e86e116020
SHA1

8231510e55caf8301e797d7f29e4c248afdf33c2
SHA256

554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252
SHA512

133f4f89d0cde43b84ff40cd1e69fd1e74a0b466e8a469cf660373c3a15bfa82926f31c0b92d5c432fe84f9eb4baea4ee03999eb35e93228579c80a1249b177b
SSDEEP

3072:x246SUuS6Uti+lnlhlP5AR7jzK6LyT5FAcGt+GxEEX:I4JUcUTblP5ABzwAZt+

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252N.exe
"C:\Users\Admin\AppData\Local\Temp\554de863ce11900f8d6f97af6eeb207d08a708f092ad9a54ebaf33cc2e27f252N.exe"
1⤵
PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2524-1-0x0000000002AF0000-0x0000000002BF0000-memory.dmp

Filesize
1024KB

Download
memory/2524-3-0x00000000002A0000-0x00000000002AB000-memory.dmp

Filesize
44KB

Download
memory/2524-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2524-2-0x0000000000400000-0x0000000002A78000-memory.dmp

Filesize
38.5MB

Download
memory/2524-5-0x0000000002AF0000-0x0000000002BF0000-memory.dmp

Filesize
1024KB

Download