Analysis
-
max time kernel
15s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
18-01-2025 20:42
Static task
static1
Behavioral task
behavioral1
Sample
1623650a9c842eb4d7172218d746a51bd04e9d9c47eef1ee70129dd010584c00.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
1623650a9c842eb4d7172218d746a51bd04e9d9c47eef1ee70129dd010584c00.exe
Resource
win10v2004-20241007-en
General
-
Target
1623650a9c842eb4d7172218d746a51bd04e9d9c47eef1ee70129dd010584c00.exe
-
Size
288KB
-
MD5
a13012f26216459efd22cbd93dfbb382
-
SHA1
36fb42c5148aacc3916106c8edb57a9621edff72
-
SHA256
1623650a9c842eb4d7172218d746a51bd04e9d9c47eef1ee70129dd010584c00
-
SHA512
d9255227c75500955aa9f633845612b828cd2d84c8797837ae3b548158e077402cc9b2f80cfca6b1090deb5781640ad765a214b07c7c18d40775ac39a5edcfbf
-
SSDEEP
3072:gYp/nBIvjB5B88gUPatXtwACz085VUaML+/48:gY/yF5G6AwAqb8K4
Malware Config
Extracted
smokeloader
pub4
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
Smokeloader family