smokeloader | 2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04-12-2024 20:22

Sharing

Report Analysis Logs

General

Target

2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778.exe
Size

230KB
MD5

841dd5e68fb06740c955a5f58cfcb44e
SHA1

834f1a81625d4c45bbc7f7ad8ed9fa05e7379485
SHA256

2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778
SHA512

232ce900cd054bc4b7bbaebd848f87d2d590ab4d090b3bf1ef493c402f26a9198f07a987163c54260bcf6039fc9752eca9cdcbb441d342fe00e73afc57eb0f9a
SSDEEP

3072:+3l7Wpw7SH+ahYg5wH91Jl0yaS5JUznpR2sm8Q8wc:I79+PhJwhcbpR2J8bwc

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778.exe
"C:\Users\Admin\AppData\Local\Temp\2d04fe9a46b612a0ee4ac34e61d6449edd043378bd7d07791ec1fd9891ee4778.exe"
1⤵
PID:2636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2636-1-0x00000000005C0000-0x00000000006C0000-memory.dmp

Filesize
1024KB

Download
memory/2636-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2636-2-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2636-4-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2636-5-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download