smokeloader | dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10-01-2025 13:17

Sharing

Report Analysis Logs

General

Target

JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35.exe
Size

29KB
MD5

e5453104d30224ac773e12cdb6aa2e35
SHA1

4eba4f3a85e3c627d8e06145abf9ca1b4983b128
SHA256

dba8a86324bf04cc9cfd982456c1427340ab41900bee122a01f28b948654465d
SHA512

814ea0a2d15d5ac5cd79a0362a61e03613061e8ff493ce5165c98dc0d2a04184b16abe10a4c1eee4f31c1f08e81ef67db475a5e7ff10ea6476e8252b801e24ba
SSDEEP

384:bs+R5mGiTFPYRhebJwkRrVoPGZXYgCGzLzXB1OMZzDJEPGYvdbiWmAnw3/DIN9r:4AQjHJrVrCurBP5DJav9LvUe9E

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e5453104d30224ac773e12cdb6aa2e35.exe"
1⤵
PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2324-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2324-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download