smokeloader | 3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
30-12-2024 18:41

Sharing

Report Analysis Logs

General

Target

2a270773553cfdca5c1fdbf24d44f18c.exe
Size

226KB
MD5

2a270773553cfdca5c1fdbf24d44f18c
SHA1

ba5a6399c539f549b519f084c54852b6d434b030
SHA256

3ffb13f7f47722571dc7271ebbb09c2b893d4efe9a515f19fccc5e75cfa93220
SHA512

dcb83c9e6325c5944e4eefe865ad95b4560f3e4557c18c9fb7b0ef2d1abfec3bac6bff416efdf3e042e0dcc4302263f57ea1aade22f912ee5d2f0a6a9c223c40
SSDEEP

3072:zKEbzkIj9XmBQXzBOY+UhcaPKzyU5NRS8/AZdF+:mEPkIjRmGNOMYz3H

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\2a270773553cfdca5c1fdbf24d44f18c.exe
"C:\Users\Admin\AppData\Local\Temp\2a270773553cfdca5c1fdbf24d44f18c.exe"
1⤵
PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-1-0x00000000008A0000-0x00000000009A0000-memory.dmp

Filesize
1024KB

Download
memory/2084-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2084-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2084-4-0x0000000000400000-0x0000000000812000-memory.dmp

Filesize
4.1MB

Download
memory/2084-5-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download