smokeloader | 1d5fe89aae579ea253d121deb90c9a61f94ddab13ff51f58f939a57f0edab73e | Triage

Analysis

max time kernel
240s
max time network
245s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
17/03/2025, 21:50

Sharing

Report Analysis Logs

General

Target

1d5fe89aae579ea253d121deb90c9a61f94ddab13ff51f58f939a57f0edab73e.exe
Size

283KB
MD5

ace2b92a3208dec19577cbac84d543b2
SHA1

c40b8908ebbfa819c3581ec85bfca66bca77b605
SHA256

1d5fe89aae579ea253d121deb90c9a61f94ddab13ff51f58f939a57f0edab73e
SHA512

e7e6244087d993ae9beac2fba78452c3eb55f52cbcf515a5888e6078d87f235f1f54c12408eb4d0457102d22a8aa18d069dda0788cce72b0b456a74f7439459f
SSDEEP

3072:KiD09rKj/em+qxnnoVL0OA18WIyXpOx9E7sFW7CsZONbo0r5EK4kwgpG:YY6mM7A18B9NFW7CswRZr5E

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\1d5fe89aae579ea253d121deb90c9a61f94ddab13ff51f58f939a57f0edab73e.exe
"C:\Users\Admin\AppData\Local\Temp\1d5fe89aae579ea253d121deb90c9a61f94ddab13ff51f58f939a57f0edab73e.exe"
1⤵
PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2108-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2108-1-0x0000000001B50000-0x0000000001C50000-memory.dmp

Filesize
1024KB

Download
memory/2108-5-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2108-4-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2108-3-0x0000000000400000-0x0000000001A11000-memory.dmp

Filesize
22.1MB

Download