smokeloader | 308cf6781ab8e7a19a2d208b14ecb8e6db7f8efe90959034c5bc478ea007d752 | Triage

Analysis

max time kernel
119s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-12-2024 01:47

Sharing

Report Analysis Logs

General

Target

308cf6781ab8e7a19a2d208b14ecb8e6db7f8efe90959034c5bc478ea007d752.exe
Size

240KB
MD5

624287f7a79b9ddb001a266e4c0797bd
SHA1

0b3477b57522cd2dad90b8c5659508e639a09e52
SHA256

308cf6781ab8e7a19a2d208b14ecb8e6db7f8efe90959034c5bc478ea007d752
SHA512

fc12eb8d761dfc4001816b3fca9b59efb1eb29eac0ead80682c0977798defc0599f3bb2d39bd403601522043ee3e0d3a0928f347241f5d1bd56ef8cd81facc56
SSDEEP

3072:gRdyL3+vK4cXkRKBOLpgiH+SBcjkdlkWoHJnTHzGjdl8W3jUWV3/HFy:4dyLDZkRKBOLiieSBXlkWopnmxt3PFy

Score

10^/10

smokeloader summ backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

summ

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\308cf6781ab8e7a19a2d208b14ecb8e6db7f8efe90959034c5bc478ea007d752.exe
"C:\Users\Admin\AppData\Local\Temp\308cf6781ab8e7a19a2d208b14ecb8e6db7f8efe90959034c5bc478ea007d752.exe"
1⤵
PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-4-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/2084-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2084-5-0x0000000000220000-0x0000000000229000-memory.dmp

Filesize
36KB

Download
memory/2084-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2084-2-0x0000000000220000-0x0000000000229000-memory.dmp

Filesize
36KB

Download
memory/2084-1-0x00000000005E0000-0x00000000006E0000-memory.dmp

Filesize
1024KB

Download