smokeloader | 7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
18/03/2025, 05:11

Sharing

Report Analysis Logs

General

Target

7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f.exe
Size

233KB
MD5

eda6e5a44657001108351760d2425c80
SHA1

bff6e0250b689d1431e72f8cf070d115ba4720f9
SHA256

7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f
SHA512

9af07ebae8bfe8158f7cdec67ac7849f3098c7b4c93fa4769ff67b40ef067221c32cc32eaf5daa2f53f5ff14c507c065e218ad00e66460f9e3737da29ff7f86e
SSDEEP

3072:45pTizma5Es7ry+KlhQoHb0NlJD4/P4rmmye8QBgW8a1IIsT8:GFa5F6t0vD4/PSm8qhIsT

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f.exe
"C:\Users\Admin\AppData\Local\Temp\7728eb47da1cbc7e34e79df27d3e9f47f0d5054baf0c9bfa3bb44ebafa9a6d6f.exe"
1⤵
PID:1664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1664-1-0x0000000002DB0000-0x0000000002EB0000-memory.dmp

Filesize
1024KB

Download
memory/1664-3-0x0000000000220000-0x000000000022B000-memory.dmp

Filesize
44KB

Download
memory/1664-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1664-2-0x0000000000400000-0x0000000002C9A000-memory.dmp

Filesize
40.6MB

Download
memory/1664-5-0x0000000002DB0000-0x0000000002EB0000-memory.dmp

Filesize
1024KB

Download