smokeloader | 0f411fca3429c794c6261ce872f15529d2fefc9a002cc52b4669d5e7f59198a2 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01-01-2025 03:50

Sharing

Report Analysis Logs

General

Target

JaffaCakes118_4617c8338e5c25c0f136c8a9e98303d3.exe
Size

212KB
MD5

4617c8338e5c25c0f136c8a9e98303d3
SHA1

d404c3a79937aab5ee0a66dc1a83671dfe275fa8
SHA256

0f411fca3429c794c6261ce872f15529d2fefc9a002cc52b4669d5e7f59198a2
SHA512

b615c82c02208a3fa5f5d75735f6671c822936f413a3ff5dedc1e373dbc0b2db08ae2835c8422aa41d289e3790f8bead4977ee896a103c77fe48e67128983dc6
SSDEEP

3072:561mP+mcCKZLvb5gh2G+Trah1boS9D98aShyuy6inoeP+9Ty1B3E:cmP+3RF+2G3vVx98aC3v9oE

Score

10^/10

smokeloader pub5 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4617c8338e5c25c0f136c8a9e98303d3.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4617c8338e5c25c0f136c8a9e98303d3.exe"
1⤵
PID:2748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2748-1-0x00000000005B0000-0x00000000006B0000-memory.dmp

Filesize
1024KB

Download
memory/2748-4-0x0000000000400000-0x00000000004A7000-memory.dmp

Filesize
668KB

Download
memory/2748-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2748-5-0x0000000000400000-0x00000000004A7000-memory.dmp

Filesize
668KB

Download