smokeloader | 2106b6824a01a362eb42a6488f960363ca0d621cc7c3e73c5be87ce48b5b1e11 | Triage

Analysis

max time kernel
120s
max time network
17s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
12-01-2025 09:45

Sharing

Report Analysis Logs

General

Target

2106b6824a01a362eb42a6488f960363ca0d621cc7c3e73c5be87ce48b5b1e11N.exe
Size

260KB
MD5

a99534016fa021b8c063de3ca56c4370
SHA1

c0a92d7d5244aa9016f99ffa372d60dea33f98c6
SHA256

2106b6824a01a362eb42a6488f960363ca0d621cc7c3e73c5be87ce48b5b1e11
SHA512

c8353d3bbda7052478727e35265e80274f11cf390b087bace7828e5cc872aefa1a2538d12938e74906b2998dacd01f1cc6e67b775de7159263b36524b28cb11b
SSDEEP

3072:yaOq4kqQxegUOxH1oK3ziOjVpaTwuRAX5Axtt2IiBnAZdF+:yaf4De/Hpz/jXxuztt2f5

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\2106b6824a01a362eb42a6488f960363ca0d621cc7c3e73c5be87ce48b5b1e11N.exe
"C:\Users\Admin\AppData\Local\Temp\2106b6824a01a362eb42a6488f960363ca0d621cc7c3e73c5be87ce48b5b1e11N.exe"
1⤵
PID:1600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-1-0x0000000000C80000-0x0000000000D80000-memory.dmp

Filesize
1024KB

Download
memory/1600-2-0x0000000000400000-0x000000000081A000-memory.dmp

Filesize
4.1MB

Download
memory/1600-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1600-4-0x0000000000400000-0x000000000081A000-memory.dmp

Filesize
4.1MB

Download
memory/1600-5-0x0000000000400000-0x000000000081A000-memory.dmp

Filesize
4.1MB

Download