Behavioral task
behavioral1
Sample
3La00TE.exe
Resource
win7-20231020-en
amadeydcratgluptebapovertystealerraccoonredlinesectopratsmokeloaderzgrat6a6a005b9aa778f606280c5fa24ae595gromekinzapixelnewup3backdoorcollectiondiscoverydropperevasioninfostealerloaderpersistenceratrootkitspywarestealertrojanupx
63 signatures
300 seconds
General
-
Target
3La00TE.exe
-
Size
30KB
-
MD5
d84569a706b9c209fe691fb20af40afe
-
SHA1
2fd9b3710be51ee7318be4b905cf17447331cc73
-
SHA256
8225d0527e3a0ad5fd83412ed5d2c026ed2677b3f8f221160d64e5bbbe492838
-
SHA512
c346a73bb0710f520524e3b0680f14c9e53428842850c000d5a1d02fcfda0014f57d619e295ad3b45bb31724e6edb69229e77d1ab73a082620ab0ba1cdc9feee
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3La00TE.exe
Files
-
3La00TE.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE