smokeloader | 863c9b9679dc1646f5126b26c22bb3a3c5e10d15f89325716b33771483e2c7ba | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-01-2025 05:06

Sharing

Report Analysis Logs

General

Target

863c9b9679dc1646f5126b26c22bb3a3c5e10d15f89325716b33771483e2c7ba.exe
Size

238KB
MD5

48fc5bc1eecef40363586181076f17a0
SHA1

b731cda57251c807dc9fcb1f09e1ee41da52523c
SHA256

863c9b9679dc1646f5126b26c22bb3a3c5e10d15f89325716b33771483e2c7ba
SHA512

24ef5b3566fe5b02b7904bf0c9f38690550a851668b06c2892711b56903139ea2b6b0fa8eda261b6bad62b3c88901648adb4ce11cf0d6853d4b0c0b83f57fc0a
SSDEEP

3072:p0ef7i9FajzFgptNwf+jbjQE7f1tI/wTl53cMwd9ZGSwF:iefrjMtmW/ES8wTTwdPGSw

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\863c9b9679dc1646f5126b26c22bb3a3c5e10d15f89325716b33771483e2c7ba.exe
"C:\Users\Admin\AppData\Local\Temp\863c9b9679dc1646f5126b26c22bb3a3c5e10d15f89325716b33771483e2c7ba.exe"
1⤵
PID:1836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1836-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1836-1-0x0000000000C60000-0x0000000000D60000-memory.dmp

Filesize
1024KB

Download
memory/1836-3-0x0000000000400000-0x0000000000814000-memory.dmp

Filesize
4.1MB

Download