smokeloader | 26805f3ec2ba666f4027e174530d339a890a4121d914d39436777f98441f511c | Triage

Analysis

max time kernel
12s
max time network
19s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
15-12-2024 13:54

Sharing

Report Analysis Logs

General

Target

26805f3ec2ba666f4027e174530d339a890a4121d914d39436777f98441f511c.exe
Size

333KB
MD5

6344cdeb1801812e07b79ac5b2b2b2db
SHA1

d027cff8281f69a515a3862bb90c55266908776f
SHA256

26805f3ec2ba666f4027e174530d339a890a4121d914d39436777f98441f511c
SHA512

619b87136c8a9850dcdef1b422a23a6f2af8f2ec04aaa98ece5379d6907d36e095a464994412b76df2b7033b0abb4ff581432d547ae89a34dbe1857f14d58478
SSDEEP

6144:b6qAqkDFa613rZRmQkU9l4B8OkipugfUsh+3oQ9gOU+fzYBb6:jkDv1PmHylsk2zfq9gT6

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\26805f3ec2ba666f4027e174530d339a890a4121d914d39436777f98441f511c.exe
"C:\Users\Admin\AppData\Local\Temp\26805f3ec2ba666f4027e174530d339a890a4121d914d39436777f98441f511c.exe"
1⤵
PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2304-1-0x0000000000900000-0x0000000000A00000-memory.dmp

Filesize
1024KB

Download
memory/2304-2-0x0000000000020000-0x0000000000029000-memory.dmp

Filesize
36KB

Download
memory/2304-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2304-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2304-5-0x0000000000020000-0x0000000000029000-memory.dmp

Filesize
36KB

Download
memory/2304-4-0x0000000000400000-0x0000000000856000-memory.dmp

Filesize
4.3MB

Download