smokeloader | 83ea194c881a81eb285714a78ac2148f82b2f370435acc982902356bd06d3e13 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
07-01-2025 07:27

Sharing

Report Analysis Logs

General

Target

JaffaCakes118_557d0e804053f7b0d95c2c19574d3bcb.exe
Size

233KB
MD5

557d0e804053f7b0d95c2c19574d3bcb
SHA1

5ac627499794af845fb8e88550b27b81a2d0fa35
SHA256

83ea194c881a81eb285714a78ac2148f82b2f370435acc982902356bd06d3e13
SHA512

a5cbdaac7955539c51500d2b52710b485084be8c994dfb9c59a86c77c8b49b1cc319c1f7082fe081ebcb52fcc63047e9247a1f52795387217a363c78037dbb98
SSDEEP

3072:JGhKikQxIHv9OlnJe6rJsx6+32YSZG6P5VisE/xdqwXIe+CNf4/AWaSkSJu98vd:VQxIHv9Ox0M5z5VisiYUIADG8el

Score

10^/10

smokeloader pub5 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_557d0e804053f7b0d95c2c19574d3bcb.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_557d0e804053f7b0d95c2c19574d3bcb.exe"
1⤵
PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2092-2-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2092-1-0x0000000000230000-0x0000000000239000-memory.dmp

Filesize
36KB

Download
memory/2092-3-0x0000000000400000-0x0000000002F01000-memory.dmp

Filesize
43.0MB

Download
memory/2092-4-0x0000000000400000-0x0000000002F01000-memory.dmp

Filesize
43.0MB

Download