smokeloader | 8e430af53d8eb61a39239d6537b7e8a2b99efb0852f8814ce1a5ebd7ace53fd4 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
30-11-2024 10:13

Sharing

Report Analysis Logs

General

Target

F99E6584C274E6814B81BE68C0F2EE47.exe
Size

189KB
MD5

f99e6584c274e6814b81be68c0f2ee47
SHA1

56c3838e6f68404b1309291639b3a300292a46b1
SHA256

8e430af53d8eb61a39239d6537b7e8a2b99efb0852f8814ce1a5ebd7ace53fd4
SHA512

1b94ad9c88fcc335368e79faa70a878eaf78fd34f192ccdba20d2fe0024b441aa372983bc132510d7c9727fb800509bc5f98e1ae2ba38a521f8c5c74361460eb
SSDEEP

3072:+FEJ0B5aRXtU49eLUoblr435Gz569C4UgO6:dJYClefz

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\F99E6584C274E6814B81BE68C0F2EE47.exe
"C:\Users\Admin\AppData\Local\Temp\F99E6584C274E6814B81BE68C0F2EE47.exe"
1⤵
PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1680-1-0x00000000009E0000-0x0000000000AE0000-memory.dmp

Filesize
1024KB

Download
memory/1680-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1680-4-0x0000000000400000-0x000000000081B000-memory.dmp

Filesize
4.1MB

Download