smokeloader | 6a75dc694584d237abf3dd6261b3fc25b3ecc22361b252311f258631761fde0c | Triage

Analysis

max time kernel
81s
max time network
16s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
16-02-2025 06:38

Sharing

Report Analysis Logs

General

Target

6a75dc694584d237abf3dd6261b3fc25b3ecc22361b252311f258631761fde0c.exe
Size

278KB
MD5

9b5f9619e40261e5fb5331b047331d81
SHA1

e76ebdb065141607d6a7e50f8d85f55508904737
SHA256

6a75dc694584d237abf3dd6261b3fc25b3ecc22361b252311f258631761fde0c
SHA512

1f59c5b2ace0518f5affcb8b8d8365029871eeb37cd7c507a8c292dca8c9b0298fb26b6e95a2c1a14d4f715f4899dacb61d1fd0330147dc151319c8cbd859078
SSDEEP

3072:Zf9JL7/HDaO1qN4Nf0efiIufkoKX5vomFOvxduMLXO:NLPM6f0JCBoT/q

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\6a75dc694584d237abf3dd6261b3fc25b3ecc22361b252311f258631761fde0c.exe
"C:\Users\Admin\AppData\Local\Temp\6a75dc694584d237abf3dd6261b3fc25b3ecc22361b252311f258631761fde0c.exe"
1⤵
PID:2772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2772-1-0x0000000000930000-0x0000000000A30000-memory.dmp

Filesize
1024KB

Download
memory/2772-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2772-3-0x0000000000400000-0x000000000081E000-memory.dmp

Filesize
4.1MB

Download
memory/2772-5-0x0000000000400000-0x000000000081E000-memory.dmp

Filesize
4.1MB

Download