smokeloader | 62c4f92778d0bd5831fad52da33914cd561ecefb6f5853925dc989bce3ffa3c9 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02-12-2024 07:28

Sharing

Report Analysis Logs

General

Target

b77fea1068099706f3f5d74f346ba334_JaffaCakes118.exe
Size

217KB
MD5

b77fea1068099706f3f5d74f346ba334
SHA1

58c57f48c3a9338ced4b3cd174b191a9e38ed7c6
SHA256

62c4f92778d0bd5831fad52da33914cd561ecefb6f5853925dc989bce3ffa3c9
SHA512

eb36d0dcc386c88d91679fbf9541a5b6d777eeea709f016921ae863e0c7fd0f0150c50451f7180cfe9ef8e1eb4b6718851449b024a444de8a431b7e7dfeff296
SSDEEP

3072:7HzizXmEwgIMjnOL0J7bdTVnCm5W3O7YWnQdnCNeoBNTfC8IU:SwgIf4J3Z0p3xWWCIwY8

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\b77fea1068099706f3f5d74f346ba334_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b77fea1068099706f3f5d74f346ba334_JaffaCakes118.exe"
1⤵
PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-4-0x0000000000400000-0x0000000002C6D000-memory.dmp

Filesize
40.4MB

Download
memory/1632-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1632-2-0x00000000001B0000-0x00000000001B9000-memory.dmp

Filesize
36KB

Download
memory/1632-1-0x00000000002B0000-0x00000000003B0000-memory.dmp

Filesize
1024KB

Download