smokeloader | 29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18/03/2025, 01:52

Sharing

Report Analysis Logs

General

Target

29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee.exe
Size

161KB
MD5

fb8ddd837ad8b94f1faf0b4920ce7b2b
SHA1

c3bc51f18a1180be27c4ee0978aaa9e1295dbd4b
SHA256

29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee
SHA512

db218213ee139583f69b00ea7e33986857cbc73f0e549f996e0dc3b0b34282c838f874a65c13fa7e21adfb8d876ca6cef9421a19171c214b1ea98b1a99f1bc74
SSDEEP

1536:IwYZ5gZyjech8y/nK/bobGPgeMWKQxljH3PBe/8YkfbM9Wzw1mE3SmJQENYmAzTa:YiZpyDz/WVPX/9CWz9xmJQMYmAzsX

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee.exe
"C:\Users\Admin\AppData\Local\Temp\29645afd1579bf501163d73ffb4cefe7043e85b47f030a2c633d721a9b10efee.exe"
1⤵
PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2236-1-0x0000000001FD0000-0x00000000020D0000-memory.dmp

Filesize
1024KB

Download
memory/2236-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2236-2-0x0000000000400000-0x0000000001F00000-memory.dmp

Filesize
27.0MB

Download
memory/2236-4-0x0000000000400000-0x0000000001F00000-memory.dmp

Filesize
27.0MB

Download