smokeloader | 023e94b66bf51c029f05aef8918245176a5e574c3ef82b4b908f917bfcf7674c | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22-12-2024 02:50

Sharing

Report Analysis Logs

General

Target

023e94b66bf51c029f05aef8918245176a5e574c3ef82b4b908f917bfcf7674c.exe
Size

288KB
MD5

5735b26765657ae3e79ebfdacf124251
SHA1

cf2471e3387661acedc1daf1830a8b5b68a7a332
SHA256

023e94b66bf51c029f05aef8918245176a5e574c3ef82b4b908f917bfcf7674c
SHA512

8b71c28490b91bdd9f1a4e8444665856a158c85f61952986b9be00e98e9438585f4b4d6df3897677f2f88f417e6b4414c74a771374e3bc5d7c69872f2f3f21a3
SSDEEP

6144:CwuVnLdSyrzB26P8udhzGV+kVNf+YzExfDZsuiz/JxEVnu:CwuVnMyrzE6P8ufzE+kn+Yg+uijwu

Score

10^/10

smokeloader backdoor trojan

Malware Config

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\023e94b66bf51c029f05aef8918245176a5e574c3ef82b4b908f917bfcf7674c.exe
"C:\Users\Admin\AppData\Local\Temp\023e94b66bf51c029f05aef8918245176a5e574c3ef82b4b908f917bfcf7674c.exe"
1⤵
PID:2824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2824-0-0x00000000002B0000-0x00000000002DB000-memory.dmp

Filesize
172KB

Download
memory/2824-1-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2824-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2824-3-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download
memory/2824-6-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2824-5-0x00000000002B0000-0x00000000002DB000-memory.dmp

Filesize
172KB

Download
memory/2824-4-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download