smokeloader | 8b7dde2273a65466be71afee907a6d3739f24ce9cb0a91920b08d5659bcee075 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08-01-2025 01:06

Sharing

Report Analysis Logs

General

Target

JaffaCakes118_82b8574fd63cde3fac977145f75836f9.exe
Size

240KB
MD5

82b8574fd63cde3fac977145f75836f9
SHA1

58a38b7a75e1dd59932ac470f0fa889ed5b65c2a
SHA256

8b7dde2273a65466be71afee907a6d3739f24ce9cb0a91920b08d5659bcee075
SHA512

80782b230671030929dd012d3f9d0c22432c642f25f58f566e936a49fc640c01e08779247f7b290b127748f45337a846aed6027b0177911fabdd22087aea1f77
SSDEEP

6144:QeccjFeYJ6N/sLsueihb12PYxVj/ClQVSHO1UY:QHcx/J6N8SYnmlQVSHk

Score

10^/10

smokeloader pub5 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub5

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_82b8574fd63cde3fac977145f75836f9.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_82b8574fd63cde3fac977145f75836f9.exe"
1⤵
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2232-1-0x0000000000900000-0x0000000000A00000-memory.dmp

Filesize
1024KB

Download
memory/2232-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2232-4-0x0000000000400000-0x000000000086B000-memory.dmp

Filesize
4.4MB

Download