smokeloader | 0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02-12-2024 15:45

Sharing

Report Analysis Logs

General

Target

0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10.exe
Size

232KB
MD5

f45a742212418d4e6134e92289008093
SHA1

22cee4c742a94109452d6189d3d9016090bb5f99
SHA256

0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10
SHA512

865472021601f03176f90bbfad4b0c35e1fdd3de4c0f1b0ab5c00a7f643a3987cb7eaff204c7a17e95c7f1879d97ba463bd4149cb264c81387fa906d8feaf64b
SSDEEP

3072:FlYl4HCHXyrW7J+DP0+NZb55aIUznpE53yi92sm8Q8wcb:FlCsKy09bpa3yi92J8bwc

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10.exe
"C:\Users\Admin\AppData\Local\Temp\0e22df51fc7e70931682f78d831ba5f187e7b180316be318eed2f9dae083bb10.exe"
1⤵
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3048-1-0x0000000000630000-0x0000000000730000-memory.dmp

Filesize
1024KB

Download
memory/3048-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/3048-4-0x0000000000400000-0x0000000000518000-memory.dmp

Filesize
1.1MB

Download