smokeloader | 80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-12-2024 13:58

Sharing

Report Analysis Logs

General

Target

80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358.exe
Size

334KB
MD5

89752a865b850fedb723108873aeea27
SHA1

6a73797decf66642c0a95c0d2884cc1420503c3c
SHA256

80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358
SHA512

d53bf1a83f5a39fcad3bc28916bc0f4f80bbaa443fd9526eb6c62a2d33cd74d5183a642f003d379d5a18f5f7f0f47d8c74f78414129be06a530b68f206b0681f
SSDEEP

6144:6c2oeKztKEnMHVWQBTwBuCu3qHZdh+3oQ9gOU+fzYQ:1eKgH0G2Za9g

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358.exe
"C:\Users\Admin\AppData\Local\Temp\80d25044cd478588d7d0fafb7f1d867ee350222c04e36cf596e9015b61a2b358.exe"
1⤵
PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2168-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2168-2-0x0000000000020000-0x0000000000029000-memory.dmp

Filesize
36KB

Download
memory/2168-1-0x00000000009D0000-0x0000000000AD0000-memory.dmp

Filesize
1024KB

Download
memory/2168-5-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2168-4-0x0000000000400000-0x0000000000856000-memory.dmp

Filesize
4.3MB

Download