smokeloader | 39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18/03/2025, 02:37

Sharing

Report Analysis Logs

General

Target

39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe
Size

228KB
MD5

6dd21638dac079e394096b1b018d5638
SHA1

b57f820d6bda6109f67155a5636965b034fd96d2
SHA256

39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657
SHA512

9b9d808236d9c432b9c9d87e5812daa99b3d0cf31c34da8477713dd575b5f0b9a05b362e367f530815a1e1a10789ae1aa93f9759e42fe309eea7f05b9a5e0d27
SSDEEP

3072:Ar9ft1WgkACOZVw+UmB4dlXny76VrY4TKQHBAgzVLK0ImGTXuVnuBZ40Uda:AEdtKyVHRxBBYDmeuRCZ40

Score

10^/10

smokeloader rbrn backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

rbrn

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe
"C:\Users\Admin\AppData\Local\Temp\39f93bf9c8075a8fdf1e55593313db8dff9e2c234edc5b2854da91e83fa06657.exe"
1⤵
PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2108-2-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/2108-4-0x0000000000640000-0x0000000000740000-memory.dmp

Filesize
1024KB

Download
memory/2108-1-0x0000000000400000-0x0000000000483000-memory.dmp

Filesize
524KB

Download
memory/2108-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download