smokeloader | 9528313d13ec6629a64434c36e11872cc12f35232908b2a2e6a89636a199d6cd | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
25/03/2025, 15:57

Sharing

Report Analysis Logs

General

Target

9528313d13ec6629a64434c36e11872cc12f35232908b2a2e6a89636a199d6cd.exe
Size

174KB
MD5

badcc5eeb093cfa468ac2433ca3ec639
SHA1

1e9b7c068262b69803f40088d7c296ec1cad777c
SHA256

9528313d13ec6629a64434c36e11872cc12f35232908b2a2e6a89636a199d6cd
SHA512

9710efb850d7109bbb51a769ecf610e1c79732d331c140392b68448f3fca49249b1458cbf7e4e931056bc4987a605616052197f1003c68d0490f66ab6e25c611
SSDEEP

3072:PEzbsWM3VTFTXFm+Dc5v8e8Bap8QHwhZoWC9sI5/DuT61m:PYoJVBTh68fB68QHwhZU9sI5/

Score

10^/10

smokeloader pub1 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\9528313d13ec6629a64434c36e11872cc12f35232908b2a2e6a89636a199d6cd.exe
"C:\Users\Admin\AppData\Local\Temp\9528313d13ec6629a64434c36e11872cc12f35232908b2a2e6a89636a199d6cd.exe"
1⤵
PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2128-1-0x0000000002E30000-0x0000000002F30000-memory.dmp

Filesize
1024KB

Download
memory/2128-2-0x0000000000230000-0x0000000000239000-memory.dmp

Filesize
36KB

Download
memory/2128-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2128-5-0x0000000000230000-0x0000000000239000-memory.dmp

Filesize
36KB

Download
memory/2128-4-0x0000000000400000-0x0000000002CBB000-memory.dmp

Filesize
40.7MB

Download